AdventNet ManageEngine Desktop Central
Table Of Contents
INTRODUCTION...... 4 Release Notes ...... 5 Contacting AdventNet...... 6 TECHNOLOGY OVERVIEW...... 8 Active Directory Overview...... 9 Group Policy Overview ...... 10 GETTING STARTED ...... 11 System Requirements ...... 12 Installing Desktop Central...... 13 Working with Desktop Central ...... 14 Installing Service Pack...... 16 Uninstalling Service Pack ...... 17 Configuring DCOM Settings ...... 18 Licensing the Product ...... 27 Understanding the Client UI...... 28 CONFIGURING DESKTOP CENTRAL ...... 31 Defining Scope of Management ...... 32 Defining Inactive Users...... 33 Managing MSI Files...... 35 Managing Custom Scripts...... 37 Personalizing the Client...... 39 USER CONFIGURATIONS...... 41 Configuring Alerts ...... 42 Executing Custom Scripts...... 43 Configuring Display Settings...... 45 Mapping Network Drives...... 47 Setting Environment Variables ...... 49 Redirecting User-Specific Folders ...... 51 Configuring Internet Explorer Settings...... 53 Configuring IP Printer ...... 55 Launching Applications...... 57
AdventNet, Inc. 1 AdventNet ManageEngine Desktop Central
Displaying Message Box ...... 58 Configuring MS Office Settings...... 59 Configuring Outlook Settings...... 61 Setting Path ...... 64 Configuring Registry Settings ...... 65 Configuring Security Policies...... 68 Configuring Shared Printer ...... 70 Managing Shortcuts...... 72 Installing Software - MSI Format ...... 75 COMPUTER CONFIGURATIONS ...... 77 Redirecting Common Folders...... 78 Executing Custom Scripts...... 80 Setting Environment Variables ...... 82 Configuring Windows XP Firewall...... 84 Configuring General Computer Settings...... 86 Launching Applications...... 87 Displaying Legal Notices ...... 88 Displaying Message Box ...... 89 Setting Path ...... 90 Configuring Registry Settings ...... 91 Configuring Security Policies...... 94 Configuring Windows Services...... 96 Installing Software - MSI Format ...... 98 CONFIGURING COLLECTIONS ...... 100 DEFINING TARGETS...... 101 MANAGING CONFIGURATIONS AND COLLECTIONS ...... 104 VIEWING REPORTS ...... 106 Viewing Configuration Reports ...... 107 Viewing Active Directory Reports ...... 108 Active Directory User Report ...... 109 Active Directory Computer Report ...... 110 Active Directory Group Report...... 111 Active Directory Organization Unit Report...... 112 Active Directory Domain Report ...... 113 Active Directory Printer Report ...... 114
AdventNet, Inc. 2 AdventNet ManageEngine Desktop Central
Active Directory Site Report...... 115 Active Directory DNS Report ...... 116 APPENDIX...... 117 Troubleshooting Tips ...... 118 Knowledge Base...... 121 FAQs...... 125 Security Policies ...... 128 Security Policies - Active Desktop ...... 129 Security Policies - Desktop ...... 130 Security Policies - Control Panel ...... 131 Security Policies - Explorer...... 133 Security Policies - Internet Explorer...... 135 Security Policies - Network ...... 138 Security Policies - System ...... 140 Security Policies - Task Scheduler ...... 142 Security Policies - Windows Installer ...... 143 Security Policies - Start Menu and Taskbar...... 144 Security Policies - Microsoft Management Console ...... 146 Security Policies - Computer ...... 150 Dynamic Variables...... 151 Limitations...... 154 Glossary...... 155
AdventNet, Inc. 3 AdventNet ManageEngine Desktop Central
Introduction
Welcome to ManageEngine Desktop Central
Desktop administration is a never-ending job. Configuration requests ranging from simple Drive Mapping configuration to software installation keep the administrators on their toes. With increasing requests and a growth in the number of desktops, it becomes more difficult to keep up with escalating demand on limited manpower.
Desktop Central enables configuring and managing desktops from a single point by leveraging the Windows Active Directory and Group Policy Objects of the Windows 2000/2003 domains. With the pre-defined configuration options, administrators can perform almost all the regular desktop management activities with ease. The ability to execute custom script gives complete administration control over the desktop. The Web- based user interface allows for applying the configuration to a single or group of desktops using a powerful filtering capability.
Desktop Central ensures that the configurations are applied to the desktops and the status is made available to the administrator to provide an end-to-end configuration experience.
Desktop Central provides the complete history of the configurations applied to the users, computers, and by configuration types in the form of reports that can be used for auditing the deployed configurations.
In addition to the configurations reports, it also provides Active Directory reports for Sites, Domains, Organization Units, Groups, Computers, etc., which gives you a complete visibility into the Active Directory.
The following sections will help you to get familiar with the product:
• Getting Started: Provides you the details of system requirements, product installation and startup. • Configuring Desktop Central: Helps you to customize our product to suit your working environment. • User Configurations: Explains the various configurations that can be deployed to users using Desktop Central and the steps to define them. • Computer Configurations: Explains the various configurations that can be deployed to computers using Desktop Central and the steps to define them. • Configuring Collections: Helps you to define a collection configurations that can be deployed simultaneously for several users or computers. • Defining Targets: Provides you the details of defining target computers and users for deploying the configuration. • Managing Configurations and Collections: Helps you to manage the defined configurations, such as viewing the status of the defined configurations or collections, suspending the deployment, resuming the suspended deployments, and so on. • Viewing Reports: Helps you to view the reports of the configurations and Active Directory components. • Appendix: This section includes, Interpreting Error Messages, and Known Issues and Limitations of Desktop Central.
AdventNet, Inc. 4 AdventNet ManageEngine Desktop Central
Release Notes
Release Notes for 3.0.1
1. Configuration based reports have been enhanced with more details. 2. Provision to remember view settings like the page size, sort order etc. across logins. 3. Overall usability is enhanced for the product. 4. Provision to change the admin credential alone in Scope Of Management (SOM) settings page. 5. Issues in Active Directory reports with large number of users is fixed. 6. Issues with multiple ip addresses given in target exclude is fixed. 7. Issue with creating shortcut in User Quick Launch Bar is fixed.
Release Notes for 3.0
The key features of this release are:
1. Ability to define configurations for users and computers in the Windows 2000/2003 domain from a central point. 2. Out-of-the-box configurations include Alerts, Message Boxes, MS Office, Display, Outlook, Drive Mapping, Path, Environment Variable, Registry Settings, Folder Redirection, Security Policies, Internet Explorer, Shared Printer, IP Printer, Shortcut, Launch Application, Windows Installer, Mail Profile, Firewall, Services, Legal Notice, Custom Scripts, and Common Folder Redirection. 3. Ability to run custom scripts to get complete administration control over the domain. 4. Multiple configurations can be defined and deployed to users or computers simultaneously using Collections. 5. Ability to define selective targets for applying the configurations. Targets can be either single user/computer or all users/computers belonging to a Site, Domain, OU, or Groups. 6. Ability to view the status of the deployed configurations from the Desktop Central client. 7. Ability to suspend, modify, and redeploy defined configurations. 8. Comprehensive reports for the defined configurations and other Active Directory components.
AdventNet, Inc. 5 AdventNet ManageEngine Desktop Central
Contacting AdventNet
AdventNet Headquarters Sales Technical Support
AdventNet Headquarters
Web site www.adventnet.com
AdventNet, Inc. 5645 Gibraltar Drive AdventNet Headquarters Pleasanton, CA 94588 USA Phone: +1-925-924-9500 Fax : +1-925-924-9600 E-mail: [email protected] AdventNet Development Centre (I) Private Limited 11 Sarathy Nagar, AdventNet Development Vijayanagar, Center Velachery, Chennai 600 042 INDIA
Phone: +91-44-22431115 (10 lines) Fax: +91-44-22435327 E-mail: [email protected]
Sales
To purchase ManageEngine Desktop Central from any part of the world, you can fill out the Sales Request Form. A sales person will contact you shortly. You can also send us an e-mail at [email protected].
You can also call the AdventNet headquarters at the following numbers: Phone: +1-925-924-9500 Fax: +1-925-924-9600 and request for Sales
Technical Support
One of the value propositions of AdventNet to its customers is excellent support. During the evaluation phase the support program is extended to you free of charge. Please send your technical queries to [email protected]
Following is the support format to be enclosed, while sending support mails:
Edition ( Free or Professional Edition) of the product Operating System version, such as Win 2000, 2003, etc. Browser version, such as Netscape 7.0, IE 5.5, etc. Details of the problem Steps to reproduce the problem.
AdventNet, Inc. 6 AdventNet ManageEngine Desktop Central
Alternatively, select the Support tab from the client window. It has the following options that will allow you to reach us: • Request Support - Submit your technical queries online. • Need Features - Request for new features in Desktop Central. • Chat Live Online - Chat with our technical team. • User Forums - Participate in a discussion with other Desktop Central users. • Contact Us - Speak to our technical team using the toll free number (1-888-720- 9500)
AdventNet, Inc. 7 AdventNet ManageEngine Desktop Central
Technology Overview
To get started with ManageEngine Desktop Central it is essential to be familiar with basics of Windows Active Directory and Group Policy. Read the following sections for more details. If you are familiar with the basics, you can skip this section.
• Active Directory Overview • Group Policy Overview
AdventNet, Inc. 8 AdventNet ManageEngine Desktop Central
Active Directory Overview
The Windows Active Directory is a hierarchical framework of objects. This provides information of the various Active Directory objects, such as resources, services, user accounts, groups, and so on, and sets the access permission and security on these objects. The structure of the Active Directory network components are:
• Domains: A group of computers that share a common directory database. • Domain Trees: One or more domains that share a contiguous namespace. • Domain Forests: One or more domain trees that share common directory information. • Organization Units: A container or a subgroup of domains that is used to organize the objects within a domain into a logical administrative group. • Objects: The objects represent single entities, such as computers, resources, users, applications, and so on, with their attributes.
Managing Security Permissions
The basic security permissions supported by Windows, such as Read, Write, and Full Control, are available to each and every objects on the Active Directory. Apart form these standard permissions, AD also provides some special permissions based on the object class,such as List contents, Delete Tree, List Object, Write Self, Control Access, Create Child, Delete Child, Read Property, Write Property, and so on.
These permissions have to be assigned to the users or groups to restrict or grant access to the Active Directory objects. Each assignment of permissions to users or groups is referred to as Access Control Entry (ACE).
Inherited Permissions
Permissions set on a container (or a parent object) can be applied to its child objects as well. This is referred to as inherited permissions. The Active Directory security model allows you to define explicit permissions or propagate permissions to its child objects. For example, you specify the following conditions for propagation:
• This object only • This object and all child objects • Computer objects • Group objects • Organizational unit objects • User objects
Containers can be any Active Directory components like Domain, Organizational Units and only objects within those containers can inherit permissions from the parent.
AdventNet, Inc. 9 AdventNet ManageEngine Desktop Central
Group Policy Overview
The Group Policy helps the administrators to configure the users' environment settings. The administrators can define the settings in a Group Policy setting, which are contained in a Group Policy objects (GPOs). This can then be applied to the users and computers of the Site, Domain, or Organization Units (OUs).
Group Policy Object Types
There are two types of Group Policy objects:
• Local Group Policy objects • Non-local Group Policy objects.
There will be only one local Group Policy object in a Windows 2000-based computer. The local GPO can be used to set the Group Policy on local computers. The Non-local GPOs reside in the domain controllers that can be linked to a site, domain, or an organization unit.
GPO Inheritance
The order of inheritance is Site, Domain, and Organizational unit.
• A GPO applied to a site affects all the users and computers of all the domains of that site. • A GPO applied to a Domain applies to all users and computers of that domain and further applies to all the users and computers of all the organization units of that domain. • A GPO applied to an Organization Unit applies to all the users and computers in the organization unit.
Group Policy Application
The Group Policies are applied in the following order:
1. When the system is started all the Group Policies that are applicable to that system are applied. 2. The Group Policy startup scripts are executed. 3. When a user log on, the Group Policies for that user are applied. This is done after the user profile is set. 4. Group logon scripts and the user logon scripts are executed. 5. When the user logs off, the log off scripts are executed. 6. When the system is shutdown, the Gropu Policy shutdown scripts that are applicable to that system are executed.
Group Policy Updates
The Group Policy updates happen at the following intervals:
• For Domain Controllers (DCs): Every five minutes • Windows 2000-based Non-DCs: Every 90 minutes and is configurable.
AdventNet, Inc. 10 AdventNet ManageEngine Desktop Central
Getting Started
The following sections describes how to get started with Desktop Central.
• System Requirements • Installing Desktop Central • Working with Desktop Central • Installing Service Pack • Uninstalling Service Pack • Configuring DCOM Settings • Licensing the Product • Understanding the Client UI
AdventNet, Inc. 11 AdventNet ManageEngine Desktop Central
System Requirements
• Hardware Requirements • Software Requirements
Hardware Requirements
Hardware Recommended Processor P4 - 1.0 GHz RAM 512 MB Disk Space 200 MB
Software Requirements
Supported Platforms
ManageEngine Desktop Central supports the following Microsoft Windows operating system versions:
• Windows 2000 • Windows 2003 • Windows XP
Supported Browsers
ManageEngine Desktop Central requires one of the following browsers to be installed in the system for working with the Desktop Central Client.
• Internet Explorer 5.5 and above • Netscape 7.0 and above • Mozilla 1.5 and above
Preferred screen resolution 1024 x 768 pixels or higher
AdventNet, Inc. 12 AdventNet ManageEngine Desktop Central
Installing Desktop Central
• Installing Desktop Central • Uninstalling Desktop Central
Desktop Central is distributed in the EXE format. Desktop Central can be installed either in the Windows Network Domain Controller or in any other workstations, having Windows 2000/XP operating system, with proper credentials.
Installing Desktop Central
Run the self-extracting EXE with an Install Shield program for installation and follow the instructions provided.
Note: You require administrative privileges to install and run the software.
Uninstalling Desktop Central
To uninstall Desktop Central, select Start --> Programs --> ManageEngine Desktop Central 3 --> Uninstall.
AdventNet, Inc. 13 AdventNet ManageEngine Desktop Central
Working with Desktop Central
• Starting Desktop Central • Launching Desktop Central Client • Steps to Perform after Initial Login • Stopping Desktop Central
Starting Desktop Central
To start Desktop Central, select Start --> Programs --> ManageEngine Desktop Central 3--> Start Desktop Central
On starting the Desktop Central, the client is automatically launched in the default browser.
The following processes are started along with the Desktop Central:
• java.exe - Desktop Central Server • mysqld-nt.exe - Database Server • wrapper.exe - For system tray operations
When Desktop Central is started in Windows XP / Windows 2003 machines with firewall enabled, Windows will pop up security alerts asking whether to block or unblock the the following programs as shown in the images below:
1. mysqld-nt - Database server 2. Java(TM) 2 Platform Standard Edition binary - Java.
You should Unblock these programs to start Desktop Central.
Fig: MySQL Alert
AdventNet, Inc. 14 AdventNet ManageEngine Desktop Central
Fig: Java Alert
Launching the Desktop Central Client
To launch the Desktop Central client,
1. open a Web browser and type http://hostname:8020 in the address bar. Here the hostname refers to the DNS name of the machine where Desktop Central is running. 2. Specify the user name and password as admin in the respective fields and click Login.
Steps to Perform after Initial Login
When you login to Desktop Central for the first time, perform the following steps:
1. Define the scope of management - Scope can be limited to a small set of computers or the whole domain. 2. Define and apply configurations to either users or computers. The applied configurations will take effect during user logon for user configurations and during reboot for computer configurations. 3. View the status if the configurations applied to the users/computers.
Stopping Desktop Central
To stop Desktop Central, select Start --> Programs --> ManageEngine Desktop Central 3 --> Stop Desktop Central
AdventNet, Inc. 15 AdventNet ManageEngine Desktop Central
Installing Service Pack
AdventNet periodically provides Service Packs which provide new features (requested by the customers), fixes for certain bugs and document updates in the form of HTML files. Service Packs can be downloaded from the Web site, and updated into ManageEngine Desktop Central using the Update Manager tool.
Note: Ensure that no application is running when applying the Service Pack. This prevents any files used by the application from being over- written. For example if the Desktop Central is running, stop the server and
then install the service pack.
The steps to apply a Service Pack are as follows: 1. Start Update manager by executing the script UpdateManager.bat file located in
Note: On clicking Install, the tool checks whether there is enough space for the installation of the service pack. If there is no enough space, the tool informs you about the lack of space. You must clear the space and then
proceed with the installation.
AdventNet, Inc. 16 AdventNet ManageEngine Desktop Central
Uninstalling Service Pack
You have the option of reverting the changes incorporated by the installation of a Service Pack. You can revert to the previous version of the Service Pack or to the base version of the application. Before you start the un-installation process, make sure no application is running.
The steps to revert to a previous version are as follows.
1. Start Update manager by executing the script UpdateManager.bat file located in
The specified Service Pack will be uninstalled from the application. You can now continue with the screen (like uninstalling another Service Pack) or quit the tool by clicking Exit.
AdventNet, Inc. 17 AdventNet ManageEngine Desktop Central
Configuring DCOM Settings
Desktop Central uses the Windows DCOM Server for getting the status of the applied configurations, file copying, GPO creation, linking, remote registry entries, etc. Microsoft Windows XP Service Pack 2 (SP2) and Windows 2003 Server Service Pack 1 (SP1) prevent the DCOM Server to perform the above functions.
Note: These configurations are required only for Windows XP Service Pack 2 (SP2) and Windows 2003 Server Service Pack 1 (SP1)
To enable DCOM Server functions, perform the following steps:
1. Disable Windows Firewall 2. Configure DCOM Settings
Disable Windows Firewall
The Windows Firewall software that is enabled by default in Windows XP SP2 and Windows Server 2003 SP1 prevents SAS DCOM connections from functioning. Follow the steps below to disable the Windows Firewall:
1. Select Start --> Settings --> Control Panel option. 2. Double-click Windows Firewall to open the Firewall settings dialog. 3. On the General tab of the Windows Firewall dialog box, select Off. 4. Click OK to disable the firewall.
Note: Firewall should be disable in the Server machine (machine where Desktop Central is installed) and all of the client machines.
Configure DCOM Settings
Note: This configuration must be done only on the Server machine (machine where Desktop Central is installed).
To enable DCOM on the server machine, you must grant launch and activate permissions to the client users as follows: 1. From the Start menu, select Run, and then type dcomcnfg. 2. Click OK to launch the Component Services dialog box. 3. In the Component Services dialog box, select Component Services, and then click the icon in the toolbar.
AdventNet, Inc. 18 AdventNet ManageEngine Desktop Central
4. In the My Computer dialog box, select the COM Security tab, and then click Edit Limits under Launch and Activate Permissions.
AdventNet, Inc. 19 AdventNet ManageEngine Desktop Central
5. In the Launch Permission dialog box, click Add to add the Domain Users Group that will access the Desktop Central server.
AdventNet, Inc. 20 AdventNet ManageEngine Desktop Central
6. Select the Domain Users Group name from the Group or user names panel and then select Allow for each permission.
7. In the Launch Permission dialog box, click Add to add the Domain Computers Group that will access the Desktop Central server.
AdventNet, Inc. 21 AdventNet ManageEngine Desktop Central
8. Select the Domain Computers Group name from the Group or user names panel and then select Allow for each permission.
9. Click OK in the Launch Permission dialog box. 10. Click OK in the My Computer dialog to save the changes. 11. In the Component Services dialog box, expand the tree in the left panel and select DCOM Config.
12. Select DCOM Config, and then locate your Desktop Central server component (DesktopCentralService) in the right panel .
AdventNet, Inc. 22 AdventNet ManageEngine Desktop Central
13. Right-click on the server component, and then select Properties. 14. In the Properties dialog box, select the Security tab and choose the Customize option under Launch and Activate Permissions
AdventNet, Inc. 23 AdventNet ManageEngine Desktop Central
15. Click Edit. 16. In the Launch Permission dialog box, click Add to add the Domain Users Group that will access the Desktop Central server.
17. Select the Domain Users group name from the Group or user names panel and then select Allow for each type of permission.
18. In the Launch Permission dialog box, click Add to add the Domain Computers Group that will access the Desktop Central server.
AdventNet, Inc. 24 AdventNet ManageEngine Desktop Central
19. Select the Domain Computers group name from the Group or user names panel and then select Allow for each type of permission.
20. Click OK in the Launch Permission dialog box. 21. In the Properties dialog box, select Customize under Access Permissions, and click Edit. 22. Select SELF in the Group or user names panel, and ensure that the Allow box is selected for the Local Access and Remote Access permissions. If the SELF user is not available, add it by clicking Add and typing SELF in the Select Users, Computers, or Groups dialog box.
AdventNet, Inc. 25 AdventNet ManageEngine Desktop Central
23. Click OK in the Access Permission dialog. 24. Click OK in the Properties dialog. 25. Close the Component Services dialog.
AdventNet, Inc. 26 AdventNet ManageEngine Desktop Central
Licensing the Product
Desktop Central is available in two editions - Free and Professional Editions
Download the product from the Website.
The Free Edition and the Professional Edition, both come packaged as a single download. During the evaluation phase, the Professional Edition is installed and can be evaluated for 45 days. After 45 days, it is automatically converted to the Free Edition, unless the Professional Edition license is purchased.
The Free Edition can be used to configure and manage up to 10 desktop.
For purchasing the license or any queries, please contact [email protected]. The license file will be sent through e-mail.
To upgrade from a Trial Edition or Free Edition to Professional Edition
1. Click the License link available in the top right corner of the Desktop Central client. This opens the License details of the product. 2. Click the Upgrade Now link and select the license file received from AdventNet using the Browse button. 3. Click Upgrade button to upgrade from Trial or Free Edition to Professional Edition.
AdventNet, Inc. 27 AdventNet ManageEngine Desktop Central
Understanding the Client UI
• Tabbed Pane • Quick Links • Left Pane • Content Pane
Desktop Central client presents complex desktop management information to administrators in a clear, well organized, and easily understandable manner. The Client is a multi-pane interface with tabs and quick links on the top pane, tab-specific links on the left pane, and object-specific views on the right pane. The home page looks similar to the one shown below:
AdventNet, Inc. 28 AdventNet ManageEngine Desktop Central
Tabbed Pane
Tabs provides easier navigation between various modules/features of Desktop Central. Each tab represent a specific module/feature in Desktop Central. The content of the left pane varies depending on the tab selected. The following are the tabs present in the product: • Home: The home tab provides a quick summary of the configurations defined in the form of charts. Apart from the configuration summary, it also provides details about the recent configurations, configurations that are in process, Resource availability details, Domain information, Active Directory terminologies, and links to define and view configurations. • Configuration: The configurations tab provides the core functions of the product. It has links to define configurations and collections and view the defined configurations based on the type and status. • Reports: The reports tab provides a comprehensive reports of the defined configurations based on users, computers, and type. It also provides ready-made reports of the Active Directory components. For more details about the available reports, refer to Viewing Reports topic. • Admin: The admin tab helps you to customize the product to your environment. It helps you to define the scope of management, manage inactive users in your domain, manage MSI files and scripts, apart from other personalization options. For further details, refer to Configuring Desktop Central section. • Support: The support tab helps you to reach us for your needs, such as getting technical support, requesting new features, participating in user discussions, and so on. It also provides self-diagnostic details about the product.
Apart from the tabs, it also has the following links on the top right corner:
• Feedback: To send feedback about the product to us. • About Us: To view the product version details. • Personalize: To customize the skin, password, and session expiry time. • License: To upgrade to the licensed version of the software. • Help: To view the product help documentation. • Sign Out: To sign out the client.
Quick Links
Quick links enables you to navigate to the frequently used pages instantly. This includes link to the following pages:
• Add User or Computer Configuration • Add Collection • View Configuration • Scope of Management • Inactive Users
AdventNet, Inc. 29 AdventNet ManageEngine Desktop Central
Left Pane
The navigation links in left pane enables navigation across the various features in the tab. The left-side navigation links changes dynamically according to the tab selected.
Content Pane
The content pane displays the specific view of the currently selected item from the tabbed pane, quick links or the left pane.
AdventNet, Inc. 30 AdventNet ManageEngine Desktop Central
Configuring Desktop Central
Desktop Central provides you the flexibility to configure the scope of management, and other essential configurations to personalize the product to suit your environment needs. Follow the links to learn more:
• Working with the Scope of Management • Defining Inactive Users • Managing MSI Details • Managing Script Details • Personalizing the Client Settings
AdventNet, Inc. 31 AdventNet ManageEngine Desktop Central
Defining Scope of Management
• Defining Scope of Management • Modifying Scope of Management
After successful installation, the first thing you do is to define the scope of management. The scope can be your complete domain or a subset of it, as the case may be. You also have an option to change the scope at a later point of time. This is referred to as Scope of Management (SOM). You can choose either Domain or Organisation Unit (OU) as your scope. For example, during evaluating the product you can limit your scope to a small group of computers and later on extend it to the complete domain.
Note: The Scope of Management must be defined before Adding the Configuration or Collection, since it prerequisite for adding the Configuration or Collection.
Defining Scope of Management
To define the scope of management for the first time after installation of Desktop Central, follow these steps:
1. Select the Admin tab to invoke the Admin page.
2. Click the Scope of Management link in the Admin Links pane. This invokes the Scope of Management page. 3. Select one of the following container under the Choose the container you would like to manage. The container can be either a Domain or an Organization Unit (OU). After selecting the container, specify the following: 1. Select the container name using the Browse button. To select the desired container from the network, click the Browse button to launch Resource Browser window. Select the desired container and click Select button. 2. Enter the user name in the User Name field for the accessing the Active Directory. 3. Enter the password in the Password field. 4. Click OK.
You can find the sub-units of the configured scope are discovered and added to the table at the bottom of the Scope of Management page.
Modifying Scope of Management
1. Follow step 1 and step 2 of Defining Scope of Management procedure. 2. The Users and Computers present in the defined scope is listed in the table at the bottom of the Scope of Management page. Click Modify to invoke the Define Scope of Management pane. 3. Follow step 3 and step 4 of Defining Scope of Management procedure to modify the existing configuration.
AdventNet, Inc. 32 AdventNet ManageEngine Desktop Central
Defining Inactive Users
• Adding Inactive Users • Inactive User Policy • Revoking Inactive Users
The configurations that are defined for users gets applied during the user logon. There may be cases where the user accounts have been created for some machines but they remain inactive for some reasons. These user accounts are referred to as inactive users. In order to get the accurate configuration status of the active users, it is recommended that the administrator add the inactive user accounts in their domain so that these users (user accounts) may not be considered for calculating the status.
Desktop Central, by default adds the following users to the inactive users list:
• Guest • krbtgt • TsInternetUser • NetShowServices • autoshare
Adding Inactive Users
To add inactive users, follow these steps:
1. Click the Admin tab to invoke the Admin page.
2. Click the Add Inactive Users link in the Admin Links pane. This invokes the Add Inactive User page with the list of inactive users that were already added. 3. Click the icon to open the Resource Browser, select the users and click OK. 4. Click the Add.
The added users gets added to the List of Inactive Users table.
Inactive User Policy
Apart from adding the inactive users manually, you can also define a policy to add inactive users based on the number of days the user account was inactive. By default, all the user accounts that remain inactive for 60 days are automatically added to the inactive users list. To modify or disable this policy, follow the steps below:
1. Follow the steps Step 1 and Step 2 of Adding Inactive Users. 2. Select Set User Policy tab. 1. To modify, change the number of days and click Change Policy. Click OK to confirm. 2. To disable the policy, clear the check box and click Change Policy. Click OK to confirm. 3. The inactive users list gets updated according to the new policy.
AdventNet, Inc. 33 AdventNet ManageEngine Desktop Central
Revoking Inactive Users
Inactive user will be made as active user automatically by Desktop Central as soon as it finds any of the inactive user logs in a system.
To revoke inactive users manually, follow these steps:
1. Follow the steps Step 1 and Step 2 of Adding Inactive Users. 2. The list of inactive users are listed in the List of Inactive Users table. Click the icon under the Actions column of the corresponding user to move it to active users. Click OK to confirm.
The user gets deleted from the List of Inactive Users table.
AdventNet, Inc. 34 AdventNet ManageEngine Desktop Central
Managing MSI Files
• Adding the MSI Details • Modifying the MSI Details • Removing the MSI Details
MSI stands for Microsoft Software Installer is an installation system for Windows and is used to install Windows-based applications. The applications that are installed using the Windows Installer are referred as MSI files.
Desktop Central enables you store the commonly used applications, which can be installed on to the client machines as required. The MSI files of the configurations performed using the Windows Installer are automatically added to the inventory. The files from the inventory can also be picked up while defining the Windows Installer Configuration.
Adding the MSI Details
To add the MSI details to Desktop Central, follow these steps:
1. Click the Admin tab to invoke the Admin page. 2. Click the MSI Details link in the Admin Links pane. This invokes the MSI Details page. 3. Click the Add MSI button to invoke the Add MSI page. 4. Enter the name of MSI in the MSI Name field. 5. Enter the description for the MSI in the Description field. 6. Select the MSI installation package file from the shared network location. Click the Browse button next to the Location field to launch Network Browser window. Select the MSI installation package file and click Select button. 7. Click the Add button. You can find the MSI is added to the table in the MSI Details page. 8. Repeat steps 3 to 7 for adding more MSI details.
Modifying the MSI Details
To modify the MSI details, follow these steps:
1. Click the Admin tab to invoke the Admin page. 2. Click the MSI Details link in the Admin Links pane. 3. Click the icon under the Actions column next to corresponding MSI Name. Click OK to confirm. 4. Follow the step 4 to step 6 of the Adding the MSI Details procedure. 5. Click the Modify button.
AdventNet, Inc. 35 AdventNet ManageEngine Desktop Central
Removing the MSI Details
To remove the MSI details, follow these steps: 1. Click the Admin tab to invoke the Admin page. 2. Click the MSI Details link in the Admin Links pane which requires modification. 3. Click the icon under the Actions column next to corresponding MSI name. Click OK to confirm deletion.
The MSI details will be deleted from the table.
AdventNet, Inc. 36 AdventNet ManageEngine Desktop Central
Managing Custom Scripts
• Adding the Script Details • Modifying the Script Details • Removing the Script Details
Custom script files are used to configure the software settings, trigger events, etc in the computer of a network. The custom script files can be batch (.bat), command (.cmd), Windows Script Host (WSH) files. The WSH files includes the VBScript (.vbs), Java Script (.js), Perl (.php), REXX, and Python files.
The important custom Script files can be stored in Inventory so that they can be used in future. The custom scripts used in the Custom Script configuration are automatically added to the inventory. The custom scripts available in the inventory can also be used while adding the Custom Script Configuration.
Adding the Script Details
To add the script details to Desktop Central, follow these steps:
1. Click the Admin tab to invoke the Admin page. 2. Click the Script Details link in the Admin Links pane. The script details page is invoked. 3. Click the Add Script button to invoke the Add Script page. 4. Select the script from local disk of the computer or from the shared network location using one of the following options. This field is mandatory. 5. Click Browse to select the script either from the local machine or from the network based on your choice above. 6. Enter the description for the script in the Description field. 7. Enter the arguments for the script in the Script Arguments field. 8. Click the Add button. You can find the script added to the table in the Script Details page. 9. Repeat steps 3 to 8 for adding more scripts.
Modifying the Script Details
To modify the Script details, follow these steps:
1. Click the Admin tab to invoke the Admin page. 2. Click the Script Details link in the Admin Links pane which requires modification. 3. Click the icon under the Actions column next to corresponding Script Name. Click OK to confirm. 4. Follow the step 4 to step 6 of the Adding the Script Details procedure. 5. Click the Modify button.
AdventNet, Inc. 37 AdventNet ManageEngine Desktop Central
Removing the Script Details
To remove the Script details, follow these steps:
1. Click the Admin tab to invoke the Admin page. 2. Click the Script Details link in the Admin Links pane which requires modification. 3. Click the icon under the Actions column next to corresponding Script name. Click OK to confirm deletion.
The script will be removed from the Script Details table.
AdventNet, Inc. 38 AdventNet ManageEngine Desktop Central
Personalizing the Client
Desktop Central provides users with the functionality to configure user accounts based on personal priorities and requirements. The settings option enables you to change an existing password, set the session time, change the Web server port, select a theme etc.,
To personalize, select the Admin tab --> Settings link.
To change the password
1. Enter the existing password in the Old Password field. 2. Enter the new password in the New Password field. 3. Enter the new password again for confirmation in the Confirm Password field. 4. Click the Save Changes button.
The new password get updated. Subsequently, you have to use the new password to login to the client.
To set the session time
1. Select the session expiry time in hours from the Session Expiry Time combo box to the desired value. 2. Click the Save Changes button.
The session expiry time gets updated.
To set the page refresh time
1. Specify the time in minutes at which the pages should get refreshed automatically. 2. Click Save Changes button.
To configure general settings
1. Select the "Start the product automatically on machine bootup" check box if you wish to start Desktop Central whenever the system is started. 2. Select the "Launch the client upon successful server startup" check box if you wish to open the client whenever the Desktop Central Server is started. 3. Select the "Show help card after deploying the configuration" check box if you wish to view the help card after successful deployment of configurations. 4. Click the Save Changes button.
AdventNet, Inc. 39 AdventNet ManageEngine Desktop Central
To change the Web server port
1. Change the Web Server Port to a desired value. 2. Click Save Changes button.
The Web Server port is changed to the new value and will take effect when you restart the Desktop Central.
To change the log level
1. Select the log level from the Current Log Level combo box. 2. Click Save Changes button.
To change the theme
1. Select the theme from the available options 2. Click Save Changes button.
AdventNet, Inc. 40 AdventNet ManageEngine Desktop Central
User Configurations
This section details the configurations that can be applied to the users of the Windows Domain. These configurations are applied to the users during user logon or logoff.
Note: Ensure that you have defined the scope of management before defining the configurations. For details, refer to Defining the Scope of Management.
To reach the configuration screen, follow the steps below:
1. Click Add Configuration link from the Quick Links. This will list all the supported configurations for users and computers. 2. Click the required configuration listed under the User Configurations.
Desktop Central supports the following configurations that can be applied on users:
Configuring Alerts Executing Custom Scrips Configuring Display Settings Mapping Network Drives Setting Environment Variables Redirecting User-Specific Folders Configuring Internet Explorer Settings Configuring IP Printer Launching Applications Configuring Mail Profiles Displaying Message Box Configuring MS Office Settings Configuring Outlook Settings Setting Path Configuring Registry Settings Configuring Security Policies Configuring Shared Printer Managing Shortcuts Installing Software - MSI Format
AdventNet, Inc. 41 AdventNet ManageEngine Desktop Central
Configuring Alerts
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
Alert Configuration enables you to warn the users about the password expiration, lower hard disk space, and larger temp file size. The alert configuration are user-specific and requires the user to be logged on to view the alerts.
Step 1: Name the Configuration
Provide a name and description for the Alert Configuration.
Step 2: Define Configuration
The table given below lists the parameters for which alerts can be configured:
Parameter Description The number of days before which the user has to be Password Expiration informed about the password expiration. The default value is 14 days. The disk space in MB. When the disk space goes below Disk Space the specified value the user will be warned. Specify whether to delete the temp files when exceeding the specified limit. You also have an option to specify the Purge Temp Files file types, size of the files, and whether to prompt the user before deleting the temp files or not.
Note: The alerts will be displayed during every logon of the user as long as the alert condition is met. For example, the user will be warned about the lower disk space during every logon until the free disk space exceeds the
specified value.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Alert Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Alert Configuration in the targets defined. The alerts will be displayed when the defined conditions are met.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 42 AdventNet ManageEngine Desktop Central
Executing Custom Scripts
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
Desktop Central provides options for configuring almost all the user configurations from remote. In addition to the configurations that are supported by Desktop Central, administrators can also write their own scripts that could be run on the user machines for accomplishing specific configurations. The scripts could be any of the following:
• Batch file (.bat or .cmd) • In any other language hosted by Windows Script Host (WSH), such as VB Script, JScript, Perl, REXX, and Python.
Note: The script engines for languages like Perl, REXX, and Python, must be registered with Windows.
Step 1: Name the Configuration
Provide a name and description for the custom script configuration.
Step 2: Define Configuration
The table given below lists the parameters that have to be provided for defining the configuration.
Parameter Description The script that has to be executed in the user machines. You have an option to select the script from any of the following: • Local: The machine from where the configuration is being defined. Script Name* • Inventory: Refers to the Desktop Central inventory. All the scripts that have been added using Managing Scripts procedure will be available here. • Network Share: Refers to the network share. The arguments that have to be provided while executing Script Arguments the scripts. Refers to the script execution time. This can be either Execute During* during the user logon or logoff.
* - Refers to the mandatory fields.
AdventNet, Inc. 43 AdventNet ManageEngine Desktop Central
Note: The scripts specified from the local or share, will automatically be added to the Desktop Central inventory after successful deployment.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Custom Script Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Custom Script Configuration in the targets defined.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Managing Custom Scripts, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 44 AdventNet ManageEngine Desktop Central
Configuring Display Settings
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The Display Configuration is for configuring the settings of Microsoft Windows Desktop such as welcome message, IntelliMouse tips, icons, folders and shortcuts, wallpaper, etc.
Step 1: Name the Configuration
Provide a name and description for the configuration.
Step 2: Define Configuration
The table below lists the display settings that can be configured using Desktop Central. Specify the values only if a change is required for a particular parameter, else, leave it blank.
Parameter Description The wallpaper file (image file) that has to set as the Wall Paper File desktop background. Click the icon to select and assign a dynamic variable to this parameter. The name you wish to configure in place of "My Rename "My Computer" Computer". Click the icon to select and assign a Icon dynamic variable to this parameter. The name you wish to have in place of "My Network Rename "My Network Places". Click the icon to select and assign a dynamic Places" Icon variable to this parameter. Remove "Windows Select this option if you wish to remove the welcome Welcome Screen" message displayed by Windows. Remove "Intellimouse Select this option to remove the intellimouse tips. Tips Screen" Remove "My Documents" Select this option to remove the "My Documents" icon Desktop Icon from the desktop.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Display Configuration.
AdventNet, Inc. 45 AdventNet ManageEngine Desktop Central
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Display Configuration in the targets defined.
The configuration will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 46 AdventNet ManageEngine Desktop Central
Mapping Network Drives
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The Drive Mapping enables you to map a remote network resource to the user machines. The mapped resource can then be accessed from the local machine using the drive name.
Step 1: Name the Configuration
Provide a name and description for the Drive Mapping configuration.
Step 2: Define Configuration
The table given below list the parameters that have to be specified for mapping a network drive:
Parameter Description Drive Name The drive letter that has to be mapped with the resource. The shared resource in the network that has to be Resource to be Shared mapped. Hide from Windows To specify whether the mapping has to be hidden in the Explorer Windows Explorer. Select this option, if you want to hide. The label name for the mapped drive that has to Drive Label displayed in Windows Explorer. Disconnect all existing Specify whether to disconnect all the existing mappings network drives before or not. mapping new
Note: 1. To map more network drives, click Add More Drives and repeat Step 2. The mapped drive gets added to the List of Drives to be Mapped table. 2. To modify a mapping from this table, select the appropriate row,
click icon and change the required values. 3. To delete a mapping from this table, select the appropriate row and click icon.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Drive Mapping Configuration.
AdventNet, Inc. 47 AdventNet ManageEngine Desktop Central
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Drive Mapping Configuration in the targets defined. The configurations will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 48 AdventNet ManageEngine Desktop Central
Setting Environment Variables
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
Environment variables are strings that contain information about the environment for the system, and the currently logged on user. Some software programs use the information to determine where to place files (such as temp, tmp, path etc). Environment variables control the behavior of various programs. Any user can add, modify, or remove a user environment variable. However, only an administrator can add, modify, or remove a system environment variable. Using Desktop Central, the environment variables can be defined and added.
Step 1: Name the Configuration
Provide a name and description for the Environment Variable configuration.
Step 2: Define Configuration
The following table lists the parameters that have to be specified:
Parameter Description The environment variable name that has to be modified Variable* or added. The value that has to be stored in the environment Value* variable. Click the icon to select and assign a dynamic variable to this parameter.
* - denotes mandatory fields
Note: 1. To add more environment variables, click Add More Variable and repeat Step 2. The defined environment variable gets added to the List of Environment Variable table. 2. To modify a environment variable from this table, select the
appropriate row, click icon and change the required values. 3. To delete a environment variable from this table, select the appropriate row and click icon.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Environment Variable Configuration.
AdventNet, Inc. 49 AdventNet ManageEngine Desktop Central
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Environment Variable Configuration in the targets defined. The configurations will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Setting Path
AdventNet, Inc. 50 AdventNet ManageEngine Desktop Central
Redirecting User-Specific Folders
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The Folder Redirection configuration helps you to change the location of the standard user profile directories to a different location in the network. So, when the user login from a different machine in the same domain, he/she will have access to his/her profiles.
Step 1: Name the Configuration
Provide a name and description for the Folder Redirection configuration.
Step 2: Define Configuration
Select the values for the following fields that require change in settings. For each of the fields in the following table, click the Browse button next to the corresponding field to launch Network Browser window. Select the folder location and click OK button. If this field is left blank, the corresponding folder settings is left unchanged.
The following table provides a brief description about the user-specific folders that can be redirected using Desktop Central.
User-specific Folder Description Start Menu Contains the shortcuts that appear in the start menu. Click the icon to select and assign a dynamic variable to this parameter. Programs Menu Contains the shortcuts that appear in the Programs group of the start menu. Click the icon to select and assign a dynamic variable to this parameter. Startup Group Contains the shortcuts that appear in Start --> Programs --> Startup menu. This specifies the applications that should be started during the user logon. Click the icon to select and assign a dynamic variable to this parameter. Desktop Contains the shortcuts and files that appear in the user's desktop. Click the icon to select and assign a dynamic variable to this parameter. Favorites [IE Contains the Internet Explorer bookmarks. Click the Bookmarks] icon to select and assign a dynamic variable to this parameter. Personal [My Contains the personal documents of that user. Click the Documents] icon to select and assign a dynamic variable to this parameter. My Pictures Contains the personal pictures and images of that user. Click the icon to select and assign a dynamic variable to this parameter.
AdventNet, Inc. 51 AdventNet ManageEngine Desktop Central
User-specific Folder Description Cookies Contains the cookies used by the Web sites/applications. Click the icon to select and assign a dynamic variable to this parameter. History Contains the bookmarks of the previously accessed sites. Click the icon to select and assign a dynamic variable to this parameter. Recent Contains the shortcuts of the recently accessed documents. Click the icon to select and assign a dynamic variable to this parameter. Temporary Internet The temporary Internet files are cached by Internet Files Explorer in this folder. Click the icon to select and assign a dynamic variable to this parameter. Send To Contains the shortcuts listed in the Send To sub-menu. The Send To sub-menu is displayed in the right-click menu of a file. Click the icon to select and assign a dynamic variable to this parameter.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Folder Redirection configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Folder Redirection Configuration in the targets defined. The configuration will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Redirecting Common Folders
AdventNet, Inc. 52 AdventNet ManageEngine Desktop Central
Configuring Internet Explorer Settings
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The Internet Explorer settings such as Home page, Search page, Download directory, and Proxy Server settings can be configured using Desktop Central Internet Explorer Configuration.
Step 1: Name the Configuration
Provide a name and description for the Internet Explorer configuration.
Step 2 Define Configuration
The following table provides the Internet Explorer parameters that can be configured using Desktop Central. Specify the values only if a change is required for a particular parameter, else, leave it blank.
Parameter Description Refers to the page that opens when the Internet Explorer Home Page is started. Refers to the search engine that Internet Explorer uses Search Page when clicked on the Search button from the toolbar. Refers to the location where the file downloads are Download Directory redirected. Click the icon to select and assign a dynamic variable to this parameter. Automatic Configuration Refers to the URL of the script that is used to configure Script the proxy settings of Internet Explorer. The Internet Connection Wizard is invoked when a user Internet Connection tries to launch the Internet Explorer for the first time. Wizard Specify whether to remove or retain this. A proxy server is a server that acts as an intermediate between the computer in the network and the Internet, Proxy Server and that ensures security, administrative control, and caching. Select the appropriate option. Address** The IP address or host name of the Proxy Server. Port** The port number of the Proxy Server Specifies how the request has to be routed when a local address is accessed using the Internet Explorer. Select any of the following options: • Bypass proxy server: Select this option if the request should not be routed through the proxy Bypass for local server for local addresses. addresses** • Dont Bypass proxy server: Select this option if the request should be routed through the proxy server even for local addresses. • Preserve Client Settings: To preserve the settings of the client untouched.
AdventNet, Inc. 53 AdventNet ManageEngine Desktop Central
Parameter Description The list of addresses that begins with the text specified in this field will not use the Proxy Server. You can specify Do not use proxy server multiple values as semi-colon separated. for addresses beginning Example: adventnet.com;desktopcentral.com with** This field is enabled only when Bypass Proxy server option is selected.
** - required only if Use Proxy Server option is selected.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Internet Explorer Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Internet Explorer Configuration in the targets defined. The configuration will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 54 AdventNet ManageEngine Desktop Central
Configuring IP Printer
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The IP Printer Configuration is for adding or deleting the IP Printer connection in the user computers. For configuring a shared printer in the computer for specific users, refer to the Configuring Shared Printer topic.
Step 1: Name the Configuration
Provide a name and description for the IP Printer configuration.
Step 2: Define Configuration
You can perform the following actions:
• Add an IP Printer • Delete an IP Printer
Add an IP Printer
To add an IP Printer, select the Action as Add and specify the following values:
Parameter Description DNS The host name or IP address defined for the printer. Name/IP Example: 192.111.2.32 Model Browse and select the printer model. If your printer model is not Name listed, you can specify it manually. The printing protocol supported by the printer. Select the printing Protocol protocol from the Protocol list box. The default option is "RAW". The port number/queue name in which printing protocol is communicating between the computer and printer. Enter the port Port number in the Port Number field if the "RAW" Protocol is selected or Number enter the queue name if the "LPR" Protocol is selected. The default value is 9100. This is an optional field. By default, the port name is Port Name IP_
AdventNet, Inc. 55 AdventNet ManageEngine Desktop Central
Delete an IP Printer
To delete an IP Printer, select the Action as Delete and specify the following values:
Parameter Description The host name or IP address defined for the printer. DNS Name/IP Example: 192.111.2.32 Delete all existing IP To delete all the existing IP printer connections in the printer connections computer for the specified user, select this option.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the IP Printer Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined IP Printer Configuration in the targets defined. The configuration will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Configuring Shared Printer
AdventNet, Inc. 56 AdventNet ManageEngine Desktop Central
Launching Applications
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
Launch Application configuration enables you to launch an application during user logon.
Step 1: Name the Configuration
Provide a name and description for the Launch Application configuration.
Step 2: Define Configuration
Specify the following values:
Parameter Description Browse and select the application that has to be launched. The applications that are available in the local Application Name machine from where the application has to be launched can also be specified. Click the icon to select and assign a dynamic variable to this parameter. Specify the arguments for the application, if any. Click Arguments the icon to select and assign a dynamic variable to this parameter.
Note: 1. To launch more applications, click Add More Application and repeat Step 2. The added application gets added to the Launch Application table. 2. To modify an application from this table, select the appropriate row,
click icon and change the required values. 3. To delete an application from this table, select the appropriate row and click icon.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Launch Application Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Launch Application Configuration in the targets defined. The applications configured will be launched during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 57 AdventNet ManageEngine Desktop Central
Displaying Message Box
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
For the users in the network, the pop-up messages with the warning or error can be displayed during the user logon. If the user has already logged on while deploying this configuration, the message will be displayed during the next logon.
Step 1: Name the Configuration
Provide a name and description for the Message Box configuration.
Step 2: Define Configuration
Specify the following:
Parameter Description Message Type The message type as information, Warning, or error. Window Title The title of the message box. Message The message that has to be displayed. Timeout in Seconds The duration, in seconds, for the message display.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Message Boxes Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Message Boxes Configuration in the targets defined. The message will be displayed during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Displaying Legal Notices
AdventNet, Inc. 58 AdventNet ManageEngine Desktop Central
Configuring MS Office Settings
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The MS Office related settings such as Open or Save, Clip Art, User Options, Command Bars, Shared Template, etc can be configured for all the users using Desktop Central MS Office Configuration.
Step 1: Name the Configuration
Provide a name and description for the MS Office configuration.
Step 2: Define Configuration
The MS Office applications that can be configured using Desktop Central are listed in the Choose Application/Suite combo box. Select the application version and specify the values that have to be changed. Leave it blank, if no change is required.
The following table lists the parameters that can be configured for each MS Office applications:
Parameter Description Word Refers to the default working folder for Microsoft Word. Open/Save Folder* Clicking Open or Save menu will open this folder location. Refers to the default Clip Art folder. This opens when you Clip Art Folder* insert an image from the clip art. User Options Folder* Refers to the folder where the user options are stored. Tools Folder* Refers to the folder where the office tools are stored. Refers to the folder where the recovered files are stored Auto Recover Folder* due to the system crash. Refers to the location where the templates and add-ins are Startup Folder* loaded during the startup of Microsoft Word. Excel Refers to the default working folder for Microsoft Excel. Open/Save Folder* Clicking Open or Save menu will open this folder location. At startup, open all files Refers to the folder containing the files that have to be in* opened during startup. Access Refers to the default working folder for Microsoft Access. Open/Save Folder* Clicking Open or Save menu will open this folder location. Refers to the location where the command bar buttons of Command Bars Folder* Microsoft Access are stored.
AdventNet, Inc. 59 AdventNet ManageEngine Desktop Central
Parameter Description PowerPoint Refers to the default working folder for Microsoft Open/Save Folder* Powerpoint. Clicking Open or Save menu will open this folder location. Refers to the location where the command bar buttons of Command Bars Folder* Microsoft Powerpoint are stored. Office Refers to the location where the Microsoft Office templates Template Folder* are stored. Refers to the location where the shared Microsoft Office Shared Template Folder* templates are stored. Outlook Refers to the location where the old journal item file is Journal Item Log File* stored. Journal Outlook Item Log Refers to the location where the old journal item file that is File* referred by the journal entry is stored. Refers to the default location for storing the favorites. Office Explorer Favorites Clicking the Add Favorites menu item will store the URLs in Folder* this location. Office Explorer Views Refers to the location where the user views are stored. Folder* Refers to the file which stores the print styles of the user Print Settings File* views.
* - Click the icon to select and assign a dynamic variable to this parameter.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the MS Office Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined MS Office Configuration for the defined targets. The configuration will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 60 AdventNet ManageEngine Desktop Central
Configuring Outlook Settings
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
Microsoft Outlook settings such as general settings, new mail arrival, automatic archive, sending a message, message format and handling, and spell check can be configured. The Outlook Configuration is used to configure these settings for the users of the network from a central location.
Step 1: Name the Configuration
Provide a name and description for the Outlook configuration.
Step 2: Define Configuration
The table given below lists the Outlook parameters that can be configured using Desktop Central. Specify the values only if a change is required for a particular parameter, else, leave it blank.
Parameter Description General Settings To show or hide the Outlook shortcut bar when Outlook View Outlook Bar is opened. To show or hide the folders listed when Outlook is View Folder List opened. Warn before deleting To enable or disable the warning message when deleting items entries from the Deleted Items folder. The folder which must be opened after the Outlook is invoked. Select from the following options: Outlook Startup in this Folder Today, Inbox, Calendar, Contacts, Tasks, Journal, Notes, and User-defined. Select User-defined option to make the user configure this option. Select the frequency at which the contents of the Empty the Deleted Items Deleted Items folder should be cleared when exiting the folder upon exit Outlook. Select User-defined option to make the user configure this option. New mail arrival Display a New mail To enable or disable the notification message when a Desktop Alert new mail arrives. To enable or disable playing sound when a new mail Play a sound arrives.
AdventNet, Inc. 61 AdventNet ManageEngine Desktop Central
Parameter Description AutoArchive To enable or disable the automatic archiving of folder. Run AutoArchive Specify the required option and choose the frequency at which archiving should be done. Prompt to AutoArchive To specify whether to prompt before archiving or not. The location where the archived files must be stored. Move old items to Click the icon to select and assign a dynamic variable to this parameter. File name The name of the archived file. Delete expired items (e- To specify whether the expired items should be deleted mail folders only) or not. When sending a message Allow comma as address To specify whether comma should be used as a address separator separator or not. Automatic name To enable or disable automatic checking for the validity checking of names in the recipient list. Message format & handling Select the message format as HTML, Rich Text, or Plain Compose in this Message Text. Select User-defined to leave it to the user to Format configure. Use Microsoft Word to Specify whether Word should be used as a default editor. edit email messages Send a copy of the pictures instead of the To specify whether to send pictures along with the mail reference to their or not. location (only for HTML format) Save copies in Sent To specify whether to save copies in the sent folder or items folder not. To specify whether to save the unsent messages or not. Autosave unsent Select the frequency if you are enabling this option. Spelling Always check spelling To specify whether to check spelling before sending the before sending message or not. Always suggest To specify whether to suggest replacement for misspelt replacements for words or not. misspelled words Ignore words in To enable or disable checking words in upper case UPPERCASE letters. Ignore words with To enable or disable checking words containing numbers. numbers Ignore original message To enable or disable checking the spelling of original in replies mails in replies.
AdventNet, Inc. 62 AdventNet ManageEngine Desktop Central
Step 3: Define Target
Using the Defining targets procedure, define the targets for deploying the Outlook Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Outlook Configuration in the defined targets. The configuration will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 63 AdventNet ManageEngine Desktop Central
Setting Path
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
For the users in the network, the paths which are configured and stored in the Path variable in the Environment Variables window (invoked by Right-click the My Computer icon, choose Properties > Advanced tab, click the Environment Variables button). The search paths including local paths, network paths or UNCs (Universal Naming Conventions). Using the Path Configuration, the path entries are added in the Environment Variables window for the users in the network.
Step 1: Name the Configuration
Provide a name and description for the Path configuration.
Step 2: Define Configuration
Specify the path to be added to the environment variables. Multiple paths can be specified separated by a semi-colon (;). Click the icon to select and assign a dynamic variable to the Path variable.
Step 3: Define Target
Using the Defining targets procedure, define the targets for deploying the Path Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Path Configuration in the defined targets. The configurations will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Setting Environment Variables
AdventNet, Inc. 64 AdventNet ManageEngine Desktop Central
Configuring Registry Settings
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The Registry Settings allows you to add, modify, and delete the values in the registry of the users. Desktop Central Registry Settings Configuration enables you to modify the values in the registry centrally and for several users.
Step 1: Name the Configuration
Provide a name and description for the Registry Settings configuration.
Step 2: Define Configuration
You can perform the following actions:
• Write Value • Delete Value • Add Key • Delete Key
Write Value
To write a value in the registry, select the Action as Write Value and specify the following values:
Parameter Description Select the header key from the following options: • HKEY_CLASSES_ROOT: It has all file associations, OLE information and shortcut data. • HKEY_CURRENT_CONFIG: It has the currently used Header Key computer hardware profile. • HKEY_CURRENT_USER: It has the preferences for the user currently logged in. • HKEY_USERS/.Default: It has the default profile preferences. Key Keys are sub-components of the hives. Specify the key value. The type of the value. This varies with respect to the Header Key Type selected. Select the appropriate type from the combo box. Specify the value to be added. Click the icon to select and assign Value a dynamic variable to this parameter. Specify the data or expression. If the new value has to be created Data / without data, enter the word clear inside the parentheses as (clear). Expression Click the icon to select and assign a dynamic variable to this parameter.
AdventNet, Inc. 65 AdventNet ManageEngine Desktop Central
Note: If you wish to write more values, click Add Registry Settings button and repeat step 2. The values gets added to the Registry Settings table.
Delete Value
To delete a value from the registry, select the Action as Delete Value and specify the following values:
Parameter Description Select the header key from the following options: • HKEY_CLASSES_ROOT: It has all file associations, OLE information and shortcut data. Header • HKEY_CURRENT_CONFIG: It has the currently used computer Key hardware profile. • HKEY_CURRENT_USER: It has the preferences for the user currently logged in. • HKEY_USERS/.Default: It has the default profile preferences. Key Keys are sub-components of the hives. Specify the key value. Value Specify the value to be deleted.
Note: If you wish to delete more values, click Add Registry Settings button and repeat step 2. The values gets added to the Registry Settings table.
Add Key
To add a registry key, select the Action as Add Key and specify the following:
Parameter Description Select the header key from the following options: • HKEY_CLASSES_ROOT: It has all file associations, OLE information and shortcut data. Header • HKEY_CURRENT_CONFIG: It has the currently used computer Key hardware profile. • HKEY_CURRENT_USER: It has the preferences for the user currently logged in. • HKEY_USERS/.Default: It has the default profile preferences. Keys are sub-components of the hives. Specify the key value to be Key added.
Note: If you wish to add more keys, click Add Registry Settings button and repeat step 2. The values gets added to the Registry Settings table.
AdventNet, Inc. 66 AdventNet ManageEngine Desktop Central
Delete Key
To delete a registry key, select the Action as Delete Key and specify the following values:
Parameter Description Select the header key from the following options: • HKEY_CLASSES_ROOT: It has all file associations, OLE information and shortcut data. • HKEY_CURRENT_CONFIG: It has the Header Key currently used computer hardware profile. • HKEY_CURRENT_USER: It has the preferences for the user currently logged in. • HKEY_USERS/.Default: It has the default profile preferences. Keys are sub-components of the hives. Specify Key the key value that has to be deleted.
Note: If you wish to delete more keys, click Add Registry Settings button and repeat step 2. The values gets added to the Registry Settings table.
To modify a registry setting from the Registry Settings table, select the appropriate row and click icon and change the required values.
To delete a registry setting from the Registry Settings table, select the appropriate row and click icon.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Registry Settings Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Registry Settings Configuration in the defined targets. The configuration will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 67 AdventNet ManageEngine Desktop Central
Configuring Security Policies
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
Security policies determine the various security restrictions that can be imposed on the users in a network. The security settings for Active Desktop, Computer, Control Panel, Explorer, Internet Explorer, Network, and System categories can be defined using Security Policies Configuration.
Step 1: Name the Configuration
Provide a name and description for the Security Policies Configuration.
Step 2: Define Configuration
Before defining the security policies, you should first specify whether the existing security policies of the user should be cleared or not. Select the required option to Clear all existing policies first.
Specify the following values:
Parameter Description The specific policy area in which the security policy will be applied. Select the desired category from the combo Choose Policy Category box. For details on the each category in the Choose Policy Category list box, refer to Windows Help documentation. The items in the Select the Policy list depends on the Category selected. Select the desired policy from Select the Policy the list. For details on the each policy in the Select the Policy list, refer to Security Policies topic. To enable or disable the selected security policy. Select the Enable option to enable the policy or the Disable Policy Value option to disable the selected policy. The default option is "Enable".
Note: 1. To add more security policies, click Add More Policies and repeat Step 2. The Security Policy with details specified for above fields are added as a row to Security Policy table. 2. To modify a security policy from this table, select the appropriate
row, click icon and change the required values. 3. To delete a security policy from this table, select the appropriate row and click icon.
AdventNet, Inc. 68 AdventNet ManageEngine Desktop Central
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Security Policies Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Security Policies Configuration in the defined targets. The security policies will be applied during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Security Policies
AdventNet, Inc. 69 AdventNet ManageEngine Desktop Central
Configuring Shared Printer
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
When a printer is installed in a machine in the network and is shared, other machines in the network can use this printer for their printing needs. Desktop Central enables you to configure the shared printer in the user machines.
For configuring an IP printer connection to the computer, refer to the Configuring IP Printer topic.
Note: To add the Shared Printer Configuration, a computer must be installed with printer connection and must be shared.
Step 1: Name the Configuration
Provide a name and description for the Shared Printer Configuration.
Step 2: Define Configuration
You can perform the following actions:
• Add a Shared Printer • Delete a Shared Printer
Add a Shared Printer
To add a shared printer, select the Action as Add and specify the following values:
Parameter Description Browse and select the path of the shared printer Shared Printer Path* location in the network. Select this check box, if you want to make this Set as default printer as the default printer for the user. By default, this option is cleared.
* - denotes mandatory field
AdventNet, Inc. 70 AdventNet ManageEngine Desktop Central
Delete a Shared Printer
To delete a shared printer, select the Action as Delete and specify the following values:
Parameter Description Browse and select the path of the shared printer Shared Printer Path* location in the network. Delete all existing Select this check box, if you want to delete all network shared printer the existing shared printer connections. By connections default, this option is disabled.
* - denotes mandatory field
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Shared Printer Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Shared Printer Configuration in the defined targets. The printer configuration will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 71 AdventNet ManageEngine Desktop Central
Managing Shortcuts
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The shortcut is an icon that points to a file or folder. The Shortcut Configuration enables you to add shortcuts to the users from a central point.
Step 1: Name the Configuration
Provide a name and description for the Shortcut Configuration.
Step 2: Define Configuration
You can perform the following actions: • Create a Shortcut • Delete a Shortcut
Create a Shortcut
To create a shortcut, select the Action as Create Shortcut and specify the following values:
Parameter Description Overwrite To modify the existing shortcut select this option. Shortcut Specify the name of the shortcut. Name* Browse and select the target application from the network for Target which a shortcut has to be created. The target application can Application* also be in the local machine where the configuration is being deployed. If the application requires any arguments, specify the arguments. Arguments* Leave it blank if it does not require any arguments. Select the location to create the shortcut. The shortcut location can be any of the following: • User Desktop: Refers to the desktop of that user. • User Favorites: Refers to the favorites folder of that user. • User Start Menu: Refers to the start menu of that user. • User Programs Group: Refers to the Start --> Programs Shortcut group of that user. Location • User Startup Group: Refers to the Start --> Programs --> Startup group of that user. • User Quick Launch Bar: Refers to the quick launch bar of that user. • All Users Desktop: Refers to the desktop common for all the users.
AdventNet, Inc. 72 AdventNet ManageEngine Desktop Central
Parameter Description • All Users Start Menu: Refers to the start menu common for all users. • All Users Programs Group: Refers to the Start --> Programs group common for all the users. • All Users Startup Group: Refers to the Start --> Programs --> Startup group common for all the users. Some applications may have some references to additional files Start In during execution. In such cases, browse and select the location Folder* from where the application has to be started. Shortcut Specify the comments for this shortcut. Comments Icon File* Browse and select the icon for the shortcut. Select how the application has be started - Normal, Maximized, or Run Window Minimized.
* - Click the icon to select and assign a dynamic variable to this parameter.
Note: If you wish to create more shortcuts, click Add Shortcut button and repeat step 2. The defined shortcut gets added to the Shortcut table.
Delete a Shortcut
To delete a shortcut, select the Action as Delete Shortcut and specify the following values:
Parameter Description Shortcut Specify the name of the shortcut. Click the icon to select and Name assign a dynamic variable to this parameter. Select the location from where the shourcuts needs to be deleted. The shortcut location can be any of the following: • User Desktop: Refers to the desktop of that user. • User Favorites: Refers to the favorites folder of that user. • User Start Menu: Refers to the start menu of that user. • User Programs Group: Refers to the Start --> Programs group of that user. • User Startup Group: Refers to the Start --> Programs --> Startup group of that user. Shortcut • User Quick Launch Bar: Refers to the quick launch bar of Location that user. • All Users Desktop: Refers to the desktop common for all the users. • All Users Start Menu: Refers to the start menu common for all users. • All Users Programs Group: Refers to the Start --> Programs group common for all the users. • All Users Startup Group: Refers to the Start --> Programs --> Startup group common for all the users.
Note: If you wish to delete more shortcuts, click Add More Shortcut button and repeat step 2. The defined shortcut gets added to the Shortcut table.
AdventNet, Inc. 73 AdventNet ManageEngine Desktop Central
To modify a shortcut from the Shortcut table, select the appropriate row and click icon and change the required values.
To delete a shortcut from the Shortcut table, select the appropriate row and click icon.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Shortcut Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Shortcut Configuration in the defined targets. The shortcut configuration will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 74 AdventNet ManageEngine Desktop Central
Installing Software - MSI Format
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The Windows Installer Configuration is for installing MSI (Microsoft Software Installer) files from remote to several computers for specific users of the Windows network.
Step 1: Name the Configuration
Provide a name and description for the Windows Installer Configuration.
Step 2: Define Configuration specify the following values:
Parameter Description Selcet the MSI name from the following: • Network Share: To select the MSI installation package file from the shared network location. Select this option and browse to select the MSI installation package file from the network using the Network Browser. MSI files selected from the network are automatically added to the inventory MSI Name after successful deployment, which can be selected from the inventory for future configurations. • Inventory: To select the MSI installation package file from the Desktop Central inventory, select the MSI name from the list box which was already added to the Desktop Central inventory. For adding the MSI installation package file to the Desktop Central Inventory, refer to the Managing MSI Files topic. To specify whether the installation should be automatic or left to the user to decide. Select any of the following options: • Assign: Selecting this option automatically installs the application during the next user logon. This Operation Type option is selected by default. • Publish: Selecting this option will intimate the user about the availability of the application. The user can decide whether to install it or not.
Note:If you want to uninstall the MSI package, you have to open the Configuration using which you have installed and modify the Operation Type to Remove and re-deploy.
AdventNet, Inc. 75 AdventNet ManageEngine Desktop Central
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Windows Installer Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Windows Installer Configuration in the defined targets. The software installation for the selected targets will happen during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 76 AdventNet ManageEngine Desktop Central
Computer Configurations
This section details the configurations that can be applied to the computers of the Windows Domain. Configurations applied to computers are available for all the users of the computers. These configurations are applied to the computers during startup or shutdown.
Note: Ensure that you have defined the scope of management before defining the configurations. For details, refer to Defining the Scope of Management.
To reach the configuration screen, follow the steps below:
1. Click Add Configuration link from the Quick Links. This will list all the supported configurations for users and computers. 2. Click the required configuration listed under the Computer Configurations.
Desktop Central supports the following configurations that can be applied on computers:
Redirecting Common Folders Executing Custom Scripts Setting Environment Variables Configuring Windows XP Firewall Configuring General Computer Settings Launching Applications Displaying Legal Notices Displaying Message Box Setting Path Configuring Registry Settings Configuring Security Policies Configuring Windows Services Installing Software - MSI Format
AdventNet, Inc. 77 AdventNet ManageEngine Desktop Central
Redirecting Common Folders
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The Common Folder Redirection Configuration helps to change the location of the All User Shell folders that are shared by all the users. The All User Shell folders which contains common Start Menu, Programs Group, Startup Group, Desktop, and application data shared by all the users. For the redirection of the user-specific folders in the computer, refer to the Redirecting User-Specific Folders topic.
Step 1: Name the Configuration
Provide a name and description for the Common Folder Redirection Configuration.
Step 2: Define Configuration
Select the values for the following fields that require change in settings. For each of the fields in the following table, click the Browse button next to the corresponding field to launch Network Browser window. Select the folder location and click OK button. If this field is left blank, the corresponding folder settings is left unchanged.
The following table provides a brief description about the common folders that can be redirected using Desktop Central.
Field Description Common Start Menu* Contains the shortcuts that appear in the start menu that are common for all the users of the computer. Common Programs Contains the shortcuts that appear in the Programs group of Group* the start menu that are common for all the users of the computer. Common Startup Group* Contains the shortcuts that appear in Start --> Programs -- > Startup menu. This specifies the applications that should be started during the startup of the system. Common Desktop* Contains the shortcuts and files that appear in the desktop that are common for all the users of the computer. Common Application Contains the application data that are shared by all the Data* users (C:\Documents and Settings\All Users\Application Data).
* - Click the icon to select and assign a dynamic variable to this parameter.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Common Folder Redirection Configuration.
AdventNet, Inc. 78 AdventNet ManageEngine Desktop Central
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Common Folder Redirection Configuration in the defined targets. The configuration will take effect during the next user logon.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Redirecting User-Specific Folders
AdventNet, Inc. 79 AdventNet ManageEngine Desktop Central
Executing Custom Scripts
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
Desktop Central provides options for configuring almost all the computer configurations from remote. In addition to the configurations that are supported by Desktop Central, administrators can also write their own scripts that could be run on the machines for accomplishing specific configurations. The scripts could be any of the following: • Batch file (.bat or .cmd) • In any other language hosted by Windows Script Host (WSH), such as VB Script, JScript, Perl, REXX, and Python.
Note: The script engines for languages like Perl, REXX, and Python, must be registered with Windows.
Step 1: Name the Configuration
Provide a name and description for the Custom Script Configuration.
Step 2: Define Configuration
The table given below lists the parameters that have to be provided for defining the configuration.
Parameter Description The script that has to be executed in the machines. You have an option to select the script from any of the following: • Local: The machine from where the configuration is Script Name* being defined. • Inventory: Refers to the Desktop Central inventory. All the scripts that have been added using Managing Scripts procedure will be available here. • Network Share: Refers to the network share. The arguments that have to be provided while executing Script Arguments the scripts. Refers to the script execution time. This can be either Execute During* during the system startup or shutdown.
* - Refers to the mandatory fields.
Note: The scripts specified from the local or share, will automatically be added to the Desktop Central inventory after successful deployment.
AdventNet, Inc. 80 AdventNet ManageEngine Desktop Central
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Custom Script Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Custom Script Configuration in the targets.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Managing Custom Scripts
AdventNet, Inc. 81 AdventNet ManageEngine Desktop Central
Setting Environment Variables
1. Name the Configuration 2. Defining Configuration 3. Defining Target 4. Deploy Configuration
Environment variables are strings that contain information about the environment for the system, and the currently logged on user. Some software programs use the information to determine where to place files (such as temp, tmp, path etc). Environment variables control the behavior of various programs. Any user can add, modify, or remove a user environment variable. However, only an administrator can add, modify, or remove a system environment variable. Using Desktop Central, the environment variables can be defined and added.
Step 1: Name the Configuration
Provide a name and description for the Environment Variable Configuration.
Step 2: Define Configuration
The following table lists the parameters that have to be specified:
Parameter Description The environment variable name that has to be modified Variable* or added. The value that has to be stored in the environment Value* variable. Click the icon to select and assign a dynamic variable to this parameter.
* - denotes mandatory fields
Note: 1. To add more environment variables, click Add More Variables and repeat Step 2. The defined environment variable gets added to the List of Environment Variable table. 2. To modify a environment variable from this table, select the
appropriate row, click icon and change the required values. 3. To delete a environment variable from this table, select the appropriate row and click icon.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Environment Variable Configuration.
AdventNet, Inc. 82 AdventNet ManageEngine Desktop Central
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Environment Variable Configuration in the targets defined. The configurations will take effect during the next system startup.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Setting Path
AdventNet, Inc. 83 AdventNet ManageEngine Desktop Central
Configuring Windows XP Firewall
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The Firewall configuration in the Windows XP Operating System can be modified using Desktop Central. The Windows XP Firewall blocks or permits access to the computer for specific TCP or UDP ports.
Note: The Firewall Configuration can be deployed only on the computers with the Windows XP (with Service Pack 2) Operating System.
Step 1: Name the Configuration
Provide a name and description for the Firewall Configuration.
Step 2: Define Configuration
Select the Firewall Action from the combo box. The action could be any of the following: • ON: To turn on the Windows XP Firewall. • OFF: To turn off the Windows XP Firewall. • DONT MODIFY: To preserve the client settings. This option is selected by default.
Note: The Firewall configurations defined using Desktop Central can be deployed successfully to the client computers. However, it will take effect only when you turn on the Windows Firewall.
Specify the following parameters to block/unblock a port:
Parameter Description Select whether to block, unblock, or to retain client settings Port Action using the Windows Firewall. The default option is Block. Specify the port in the form of Port Number - Port Name - Protocol. The standard ports and services are listed in the Choose Port [Number - combo box. If the required port is not listed, select the Name - Protocol] Customize link to either choose the port from the Additional ports list or to add your own by providing the required details. On selecting the port the dependent services are shown in Dependent Services this field. This cannot be modified from here.
Note: 1. To block/unblock more ports, click Add More Ports and repeat Step 2. The port gets added to the Firewall table. 2. To modify a setting from this table, select the appropriate row, click icon and change the required values. 3. To delete a setting from this table, select the appropriate row and click icon.
AdventNet, Inc. 84 AdventNet ManageEngine Desktop Central
Step 3: Define Target
Using the Defining Targets procedure, define the targets deploying the Firewall Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Firewall Configuration in the defined targets. The configurations will take effect during the next system startup.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 85 AdventNet ManageEngine Desktop Central
Configuring General Computer Settings
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The General Configuration is for configuring the general settings for the computers, such as configuring display the last user name, synchronize the system time with Time Server, and so on.
Step 1: Name the Configuration
Provide a name and description for the General Configuration.
Step 2: Define Configuration
The table below lists the general settings that can be configured using Desktop Central. Specify the values only if a change is required for a particular parameter, else, leave it blank.
Parameter Description To specify whether to display the previously logged user name or not. This is displayed when a user logs on to the Display last User Name system. To leave it unchanged, select Preserve client settings option. The name of the registered owner of the system. This is Registered Owner* displayed in the General tab of the My Computer properties window. The name of the company. This is displayed in the Registered Company* General tab of the My Computer properties window. Browse and select a time server to synchronize the time Time Server of the computer with of the time server. Time synchronization happens when the computer is started.
* - Click the icon to select and assign a dynamic variable to this parameter.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the General Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined General Configuration in the defined targets. The configuration will take effect during the next system startup.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 86 AdventNet ManageEngine Desktop Central
Launching Applications
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
Launch Application configuration enables you to launch an application during startup or shutdown of the computer.
Step 1: Name the Configuration
Provide a name and description for the Launch Application Configuration.
Step 2: Define Configuration
Specify the following values:
Parameter Description Browse and select the application that has to be launched. The applications that are available in the local Application Name* machine from where the application has to be launched can also be specified. Arguments* Specify the arguments for the application, if any.
* - Click the icon to select and assign a dynamic variable to this parameter.
Note: 1. To launch more applications, click Add More Application and repeat Step 2. The added application gets added to the Launch Application table. 2. To modify an application from this table, select the appropriate row,
click icon and change the required values. 3. To delete an application from this table, select the appropriate row and click icon.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Launch Application Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Launch Application Configuration in the targets defined. The applications configured will be launched during the next system startup.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 87 AdventNet ManageEngine Desktop Central
Displaying Legal Notices
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The important enterprise wide announcements, legal notice, etc., can be configured using the Legal Notice configuration. The configured message will be displayed whenever the user presses ctrl+alt+del to login.
Step 1: Name the Configuration
Provide a name and description for the Legal Notice Configuration.
Step 2: Define Configuration
Specify the following:
Parameter Description Remove Already Defined Select this option to clear the previous configurations, if Legal Notice any. Window Title* Specify the window title of the legal notice. Message* Specify the message that has to be displayed.
* - Click the icon to select and assign a dynamic variable to this parameter.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Legal Notice Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Legal Notice Configuration in the defined targets. The configured legal notice will be displayed during the next system startup.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Displaying Message Box
AdventNet, Inc. 88 AdventNet ManageEngine Desktop Central
Displaying Message Box
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
For the computers in the network, the pop-up messages with the warning or error can be displayed during the system startup. If the system is already running while deploying this configuration, the message will be displayed during the system restart.
Step 1: Name the Configuration
Provide a name and description for the Message Boxes Configuration.
Step 2: Define Configuration
Specify the following:
Parameter Description Message Type The message type as information, Warning, or Error. Window Title The title of the message box. Message The message that has to be displayed. Timeout in Seconds The duration, in seconds, for the message display.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Message Boxes Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Message Boxes Configuration in the targets defined. The message will be displayed during the next system startup.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Displaying Legal Notices
AdventNet, Inc. 89 AdventNet ManageEngine Desktop Central
Setting Path
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
Path is an environment variable that contains the path prefixes that certain applications, utilities, and functions uses to search for an executable file. The Path Configuration enables you to add path prefixes to this variable.
Step 1: Name the Configuration
Provide a name and description for the Path Configuration
Step 2: Define Configuration
Specify the path to be added to the environment variables. Multiple paths can be specified separated by a semi-colon (;). Click the icon to select and assign a dynamic variable to the Path variable.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Path Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Path Configuration in the targets defined. The configurations will take effect during the next system startup.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Setting Environment Variables
AdventNet, Inc. 90 AdventNet ManageEngine Desktop Central
Configuring Registry Settings
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The Registry Settings allows you to change the values in the registry in the workstations. Desktop Central Registry Settings Configuration enables you to modify the registry values from a central location.
Step 1: Name the Configuration
Provide a name and description for the Registry Settings Configuration.
Step 2: Define Configuration
You can perform the following actions:
• Write Value • Delete Value • Add Key • Delete Key
Write Value
To write a value to the registry, select the Action as Write Value and specify the following:
Parameter Description Select the header key or hive as Header Key HKEY_LOCAL_MACHINE. Keys are sub-components of the hives. Specify Key the key value. The type of the value. This varies with respect Type to the Header Key selected. Select the appropriate type from the combo box. Value* Specify the value to be added. Specify the data or expression. If the new value has to be created without data, enter Data / Expression* the word clear inside the parentheses as (clear).
* - Click the icon to select and assign a dynamic variable to this parameter.
Note: If you wish to write more values, click Add More Registry Settings button and repeat step 2. The values gets added to the Registry Settings table.
AdventNet, Inc. 91 AdventNet ManageEngine Desktop Central
Delete Value
To delete a value from the registry, select the Action as Delete Value and specify the following values:
Parameter Description Select the header key or hive as Header Key HKEY_LOCAL_MACHINE. Keys are sub-components of the hives. Specify Key the key value. Value Specify the value to be deleted.
Note: If you wish to delete more values, click Add Registry Settings button and repeat step 2. The values gets added to the Registry Settings table.
Add Key
To add a registry key, select the Action as Add Key and specify the following:
Parameter Description Select the header key or hive as Header Key HKEY_LOCAL_MACHINE. Keys are sub-components of the hives. Specify Key the key value to be added.
Note: If you wish to add more keys, click Add Registry Settings button and repeat step 2. The values gets added to the Registry Settings table.
Delete Key
To delete a registry key, select the Action as Delete Key and specify the following values:
Parameter Description Select the header key or hive as Header Key HKEY_LOCAL_MACHINE. Keys are sub-components of the hives. Specify Key the key value that has to be deleted.
Note: If you wish to delete more keys, click Add Registry Settings button and repeat step 2. The values gets added to the Registry Settings table.
To modify a registry setting from the Registry Settings table, select the appropriate row and click icon and change the required values.
To delete a registry setting from the Registry Settings table, select the appropriate row and click icon.
AdventNet, Inc. 92 AdventNet ManageEngine Desktop Central
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Registry Settings Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Registry Settings Configuration in the targets defined. The configuration will take effect during the next system startup.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 93 AdventNet ManageEngine Desktop Central
Configuring Security Policies
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
For the computers in the network, the Security Policies are security settings to specify the security and restrictions. The security settings for preventing users to change file type association can be defined using Security Policies Configuration.
Step 1: Name the Configuration
Provide a name and description for the Security Policies Configuration.
Step 2: Define Configuration
Before defining the security policies, you should first specify whether the existing security policies of the user should be cleared or not. Select the required option from the Clear all existing policies first combo box.
Specify the following values:
Parameter Description Choose Policy Category Choose the policy category as Computer. The items in the Select the Policy list depends on the Category selected. Select the desired policy from Select the Policy the list. For details on the each policy in the Select the Policy list, refer to Security Policies topic To enable or disable the selected security policy. Select the Enable option to enable the policy or the Disable Policy Value option to disable the selected policy. The default option is "Enable".
Note: 1. To add more security policies, click Add More Policies and repeat Step 2. The Security Policy with details specified for above fields are added as a row to Security Policy table. 2. To modify a security policy from this table, select the appropriate
row, click icon and change the required values. 3. To delete a security policy from this table, select the appropriate row and click icon.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Security Policies Configuration.
AdventNet, Inc. 94 AdventNet ManageEngine Desktop Central
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Security Policies Configuration in the targets defined. The security policies will be applied during the next system startup.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets, Security Policies
AdventNet, Inc. 95 AdventNet ManageEngine Desktop Central
Configuring Windows Services
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
Applications that have to be run automatically whenever the system is started can be configured to run as a Windows service. However in certain cases, after installing an application as a service, you may wish to change the startup type or delete the service. The Service Configuration enables you to change the settings for the services available in the Control Panel >Administrative Tools >Services.
Step 1: Name the Configuration
Provide a name and description for the Service Configuration.
Step 2: Define Configuration
Specify the following values:
Parameter Description Select the name of the service from the combo box. The combo box contains the list of standard Windows services. If the required service is not listed, click Service Name Customize to either select the service from the Additional Services list or add you own by giving the required details. Specify the action to be performed from the following: • Don't Modify: To preserve the client settings. This option is selected by default. Action • Start: Select this option to start the service. • Stop: Select this option to stop the service. • Restart: Select this option to restart the service. Select how the service should be started from the following options: • Don't Modify: To preserve the client setting. • Manual: Select this option if the service has to be Service Startup Type manually started after the system startup. • Disabled: Select this option to disable the service. • Automatic: Select this option to automatically start the service along with the system.
Note: 1. To add more services, click Add More Service and repeat Step 2. The service gets added to the Services table. 2. To modify a service from this table, select the appropriate row, click icon and change the required values. 3. To delete a service from this table, select the appropriate row and click icon.
AdventNet, Inc. 96 AdventNet ManageEngine Desktop Central
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Service Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Service Configuration in the defined targets. The configuration will take effect during the next system startup.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 97 AdventNet ManageEngine Desktop Central
Installing Software - MSI Format
1. Name the Configuration 2. Define Configuration 3. Define Target 4. Deploy Configuration
The Windows Installer Configuration for installing MSI (Microsoft Software Installer) files remotely to several computers from a central location of the Windows network.
Step 1: Name the Configuration
Provide a name and description for the Windows Installer Configuration.
Step 2: Define Configuration specify the following values:
Parameter Description Selcet the MSI name from the following: • Network Share: To select the MSI installation package file from the shared network location. Select this option and browse to select the MSI installation package file from the network using the Network Browser. MSI files selected from the network are automatically added to the inventory after successful deployment, which can be MSI Name selected from the inventory for future configurations. • Inventory: To select the MSI installation package file from the Desktop Central inventory, select the MSI name from the list box which was already added to the Desktop Central inventory. For adding the MSI installation package file to the Desktop Central Inventory, refer to the Managing MSI Files topic. Operation Type Assign specifies that the installation is automatic.
Note:If you want to uninstall the MSI package, you have to open the Configuration using which you have installed and modify the Operation Type to Remove and re-deploy.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Windows Installer Configuration.
AdventNet, Inc. 98 AdventNet ManageEngine Desktop Central
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Windows Installer Configuration in the defined targets. The software installation for the selected targets will happen during the next system startup.
To save the configuration as draft, click Save as Draft.
See Also: Managing Configurations and Collections, Viewing Configuration Reports, Defining Targets
AdventNet, Inc. 99 AdventNet ManageEngine Desktop Central
Configuring Collections
1. Define Collection 2. Define Target 3. Save or Deploy Collection
A collection of Configurations can be deployed in the target client workstation using Desktop Central. The advantages of Collection are
• The targets are defined once for multiple Configuration. • When the configuration is deployed, it saves time to apply the configuration since collection of configuration is applied in each workstation.
Step 1: Define Collection
1. Click Add Collection link from the Quick Links. 2. Select the collection type as User Collection or Computer Collection. This opens the Add Collection Wizard. 3. Provide a name and description for the collection. 4. Choose the configurations that have to added to this collection and click Next. The configurations are specific to the collection type you have selected above. 5. Define the chosen configurations. Refer to User Configurations and Computer Configurations sections for details about the configurations.
Step 2: Define Target
Select the targets for which the configurations have to be applied. Refer to the Defining Targets topic for more details.
Step 3: Save or Deploy Collection
After defining the configurations and targets, click Finish to deploy the defined configurations to the selected targets. You also have an option to save the configurations as drafts for later modifications by clicking the Save as Draft button.
Note: The collections that are saved as drafts will not be deployed. You have to modify the definition and deploy it later.
AdventNet, Inc. 100 AdventNet ManageEngine Desktop Central
Defining Targets
• Adding a target to Target List • Modifying a target in Target List • Deleting a target from the Target List
After defining the configuration, the configuration has to be deployed in the target client workstations. The target client workstations have to be defined for the configurations individually. Defining the targets involves selecting various types of targets given below:
The targets must be defined to deploy the Configuration in the machines of the network. When you add a configuration or collection of Configuration, you can find "Step 2" as Define Target in the GUI or in this documentation. This section explains the procedure to define the target for a configuration or collection of Configuration. The Define Target pane is similar to the figure given below:
To define the targets for deploying the configuration or collection, the targets must be added to the Target List. A target can be added, removed or modified in the Target List.
Adding a target to Target List
To add a target to Target List, follow these steps:
a. Provide the values for the following fields: • Select the target type and define • Filter the selected target o Exclude if Target Type is o Exclude if Operation System is o Exclude if Machine Type is b. Click the Add to target list button. The target gets added to Target List.
AdventNet, Inc. 101 AdventNet ManageEngine Desktop Central
Modifying a target in Target List
To modify a target in the Target List, follow these steps: a. Select the button under Actions column in the desired row that has to modified. b. Follow step a of Adding a row to Target List procedure. c. Click the Modify target button. The target details are updated in Target List.
Deleting a target from the Target List
To delete a row in the Target List, select the button under Actions column next to target that has to removed.
Select the target type and define
The target type such as site, domain, organisational unit, group, user, computer or IP address can be selected. Desktop Central provides the option to select any part of the Windows network. Select one of the following options from the Select the target type and define field and select the target using the Browse button. Click the Browse button in under the Select the target type and define field to launch Network Browser window. Select the target and click Select button. This field is mandatory. • Domain • Organisation Unit • Group • User
Filter the selected target
You can exclude certain parts of the network which does not require the configuration to be deployed. This is optional when defining the targets. Desktop Central provides the option to exclude the parts of the Windows network. Click the Show link next to Filter the selected target toggle pane to show the pane as in the following figure.
AdventNet, Inc. 102 AdventNet ManageEngine Desktop Central
Exclude if Target Type is
The target types can be excluded which are in the lower hierarchy to the target selected in the Select the target type and define field. The target type can be excluded using the Browse button. Click the Browse button next to the required target types under the Exclude if Target Type is field to launch Network Browser window. Select the target type to be excluded for configuration deployment and click Select button. This field is mandatory.
Exclude if Operating System is
The targets with specific Windows OS can be excluded for configuration deployment. Select the options under the Exclude if Operating System is field which has to excluded for configuration deployment.
Exclude if Machine Type is
The targets with specific machine type such as Notebook, Tablet PC, Desktop, Member Server, TermServClient, or Domain Controller can be excluded for configuration deployment. Select the options under the Exclude if Machine Type is field which has to excluded for configuration deployment.
AdventNet, Inc. 103 AdventNet ManageEngine Desktop Central
Managing Configurations and Collections
• Viewing the Status of Configuration/Collection • Modifying the Configuration/Collection • Suspending the Configuration/Collection • Resuming the Suspended Configuration/Collection
Clicking the View Configuration from the Quick Links will list the details of the configurations and collections that are defined using Desktop Central. You can view the details of the configurations by clicking the corresponding configuration name. Apart from viewing the configuration details, you can perform the following actions: • Modify the Configuration/Collection • Suspend a Configuration/Collection • Resume a suspended Configuration/Collection
Viewing Status of Configuration/Collection
To view the status of the defined configuration/collection, follow the steps given below:
1. Click View Configuration from the Quick Links. This opens the All Configurations page. 2. All the configurations and collections that are defined are listed here. The status column provides the current status of the configuration/collection. The table given below lists the various states of the configuration/collection and its description:
Status Description Draft Represents the configurations/collections that are saved as draft. Ready To Execute Represents the configurations/collections that are ready for execution. This will be the initial state of the deployed configurations/collections. In Progress Represents that the configuration is applied on one or more targets. Will continue to remain in this state until the configurations are applied to all the defined targets. Suspended Represents that the configuration/collection has been suspended. Executed Represents that the configuration/collection has been applied to all the defined targets.
3. To view the status of the configurations on individual targets, click the configuration name.
Modifying the Configuration/Collection
To modify a configuration/collection, follow the steps given below:
1. Click View Configuration from the Quick Links. This opens the All Configurations page. 2. All the configurations and collections that are defined are listed here. Click the icon from the Actions column of the corresponding configuration/collection. 3. Change the values as required. 4. Click Deploy.
AdventNet, Inc. 104 AdventNet ManageEngine Desktop Central
Suspending the Configuration/Collection
To suspend a configuration/collection, follow the steps given below:
1. Click View Configuration from the Quick Links. This opens the All Configurations page. 2. All the configurations and collections that are defined are listed here. Click the icon from the Actions column of the corresponding configuration/collection that has to be suspended.
Note: Configurations that have been applied to targets prior to suspension will not be reverted. Suspending a configuration will only stop further deployments.
Resuming the Suspended Configuration/Collection
To resume a suspended configuration/collection, follow the steps given below:
1. Click View Configuration from the Quick Links. This opens the All Configurations page. 2. All the configurations and collections that are defined are listed here. Click the icon from the Actions column of the corresponding configuration/collection that has to be resumed.
AdventNet, Inc. 105 AdventNet ManageEngine Desktop Central
Viewing Reports
Desktop Central provides comprehensive reports of the configurations defined using Desktop Central and components of the Windows Active Directory.
• Viewing Configuration Reports • Viewing Active Directory Reports
AdventNet, Inc. 106 AdventNet ManageEngine Desktop Central
Viewing Configuration Reports
The Configuration reports helps the administrators to view the details of the configurations that are applied on users, computers, and based on the configuration type. To view the reports, follow the steps given below:
1. Click the Reports tab to invoke the Reports page. 2. Click the desired report from the Configuration Reports.
The Configuration Reports includes the following reports:
• Configuration by User • Configuration by Computer • Configurations by Type
Configuration by User
This report provides a list of users for whom configurations were applied using Desktop Central. It also provides details about the total number of configurations applied for a particular user and the last configuration and time at which it was applied. Clicking the user name will list the details of the configurations applied for that user.
You also have an option to filter your view based on the time at which the configuration was applied or by the configuration type.
Configuration by Computer
This report provides a list of computers for which configurations were applied using Desktop Central. It also provides details about the total number of configurations applied for that computer and the last configuration and time at which it was applied. Clicking the computer name will list the details of the configurations applied for that machine.
You also have an option to filter your view based on the time at which the configuration was applied or by the configuration type.
Configurations by Type
This report provides you the list of configurations that have been applied on users and computers based on the configuration type. It also provides you the total number of configurations that have been applied for a particular type and the last configuration, and time at which it was applied.
AdventNet, Inc. 107 AdventNet ManageEngine Desktop Central
Viewing Active Directory Reports
Desktop Central gives you an insight into the Active Directory by providing reports on various Active Directory components. The following reports about the Active Directory are shown:
• Active Directory User Report • Active Directory Computer Report • Active Directory Group Report • Active Directory Organization Unit Report • Active Directory Printer Report • Active Directory Domain Report • Active Directory Site Report • Active Directory DNS Report
AdventNet, Inc. 108 AdventNet ManageEngine Desktop Central
Active Directory User Report
Active Directory User Report provides the list of Users with their attributes such as user name, creation time, location in Office, and last logon.
To view the report, follow the steps below:
1. Click the Reports tab to invoke the Reports page. 2. Click the User Report link under the Active Directory Report.
You have an option to either export this report to PDF, CSV formats or to print the report.
AdventNet, Inc. 109 AdventNet ManageEngine Desktop Central
Active Directory Computer Report
Active Directory Computer Report provides the list of computers or workstations with their attributes such as computer name, OS, hardware details, IP address, and MAC address. Also, the charts and tabulation showing number of workstations based on operating systems.
To view the report, follow the steps below:
1. Click the Reports tab to invoke the Reports page. 2. Click the Computer Report link under the Active Directory Report.
You have an option to either export this report to PDF, CSV formats or to print the report.
AdventNet, Inc. 110 AdventNet ManageEngine Desktop Central
Active Directory Group Report
Active Directory Group Report provides the list of user groups with their attributes such as group name, member users, member computers, and member groups. Clicking a row will provide more details like the members of that group, creation time, modified time, location, etc.
To view the report, follow the steps below:
1. Click the Reports tab to invoke the Reports page. 2. Click the Group Report link under the Active Directory Report.
You have an option to either export this report to PDF, CSV formats or to print the report.
AdventNet, Inc. 111 AdventNet ManageEngine Desktop Central
Active Directory Organization Unit Report
Active Directory Organization Unit Report provides the list of OUs with their attributes such as container or OU name, member users, member computers, member groups, and member OUs. Clicking a row from the report provides more details, such as members of OU, location of the OU, created time, modified time, and so on.
To view the report, follow the steps below:
1. Click the Reports tab to invoke the Reports page. 2. Click the Organization Unit Report link under the Active Directory Report.
You have an option to either export this report to PDF, CSV formats or to print the report.
AdventNet, Inc. 112 AdventNet ManageEngine Desktop Central
Active Directory Domain Report
Active Directory Domain Report provides the complete information of domain with the fully qualified Domain name, creation time, modified time, location, and its members.
To view the report, follow the steps below:
1. Click the Reports tab to invoke the Reports page. 2. Click the Domain Report link under the Active Directory Report.
You have an option to either export this report to PDF, CSV formats or to print the report.
AdventNet, Inc. 113 AdventNet ManageEngine Desktop Central
Active Directory Printer Report
Active Directory Printer Report provides the list of printers with their attributes such as name, host server name, model of printer, physical location and share name. Clicking the printer from the report gives details, such as Domain name, Active Directory URL, Model, Physical location, Share name, Modified time, Creation time, Printer Hosted Server name, Driver name, and Port name.
To view the report, follow the steps below:
1. Click the Reports tab to invoke the Reports page. 2. Click the Printer Report link under the Active Directory Report.
You have an option to either export this report to PDF, CSV formats or to print the report.
AdventNet, Inc. 114 AdventNet ManageEngine Desktop Central
Active Directory Site Report
Active Directory Site Report provides the list of Sites with their attributes, such as Site name, subnet, netmask, and domain controller. Clicking a site from the report provides more details, such as the number of computers in each subnet, creation time, modified time, and so on.
To view the report, follow the steps below:
1. Click the Reports tab to invoke the Reports page. 2. Click the Site Report link under the Active Directory Report.
You have an option to either export this report to PDF, CSV formats or to print the report.
AdventNet, Inc. 115 AdventNet ManageEngine Desktop Central
Active Directory DNS Report
Active Directory DNS Report provides the ist of DNS with their attributes such as owner name, priority, weight, port number, and target.
To view the report, follow the steps below:
1. Click the Reports tab to invoke the Reports page. 2. Click the DNS Report link under the Active Directory Report.
You have an option to either export this report to PDF, CSV formats or to print the report.
AdventNet, Inc. 116 AdventNet ManageEngine Desktop Central
Appendix
This section includes the following topics:
• Troubleshooting Tips • Knowledge Base • FAQs • Security Policies • Limitations • Glossary
AdventNet, Inc. 117 AdventNet ManageEngine Desktop Central
Troubleshooting Tips
1. 1001: Storage Error Occurred 2. 1002: Unknown Error 3. 1003: DB Error 4. 1004: DB Error 5. 1010: Invalid User 6. 1011: User is already Inactive 7. 1101: Invalid container name 8. 1103: Group Policy Object (GPO) creation failed 9. 1104: Group Policy Object (GPO) deletion failed 10. 1105: Group Policy Object (GPO) linking failed 11. 1106: Group Policy Object (GPO) unlinking failed 12. 1107: WMI query failed 13. 1108: Active Directory error occurred 14. 1109: Unable to Extract Information from the given Msi Package 15. 1110: Access is Denied 16. 1111: File Copy Failed 17. 1112: Folder Copy Failed 18. 1113: The Given User Account is not a valid Domain Administrator 19. 1114: The Given Password is wrong 20. 1115: Active Directory/Domain Controller not Found
1001: Storage Error Occurred
The configurations defined using Desktop Central are stored in the database. If we are unable to store the configuration details, this error message is shown. The reasons could be any of the following: • Could not establish connection with the database. • Violations in data definitions.
1002: Unknown error
This error is shown when any runtime error occurs, which is not defined in Desktop Central. Please contact desktop central support with the details of the error.
1003: DB Error
This error is shown when the database connection is lost.
1004: DB Error
This error message is shown when you try to access the data, which has been deleted from the database.
1010: Invalid User
While defining the scope of management, if the user name provided is invalid, this error message is shown.
1011: User is already Inactive
When you try to add an user which is already present in the Invalid User list, this error message is shown.
AdventNet, Inc. 118 AdventNet ManageEngine Desktop Central
1101: Invalid Container name
While defining targets for the configuration or while defining the scope of management, if an invalid / nonexistent container name is given this error occurs. The error message is shown, when you click Add more targets button or during deployment.
1103: Group Policy Object (GPO) creation failed
For every configuration a Group Policy Object (GPOs) will be created. When the GPO could not be created due to some access restrictions, etc., this error is shown.
1104: Group Policy Object (GPO) deletion failed
When an already defined configuration is deleted, the corresponding GPO is also deleted. This error is shown, when the GPO could not be deleted.
1105: Group Policy Object (GPO) linking failed
When a configuration defined, a GPO will be created and linked with the targets specified. This error is shown, when the linking fails.
1106: Group Policy Object (GPO) unlinking failed
When an already defined configuration is suspended, respective GPO will be unlinked from the targets. This error is shown, when the unlinking fails.
1107: WMI query failed
Desktop Central fetches the computer details through WMI. The WMI query may fail in the following cases: • Authentication failure • When the machine is shutdown • When the RPC server is not running.
1108: Active Directory error occurred
Pertains to the Active Directory related error. Please create a support file by clicking the Support File link available under the Support tab and send it to [email protected]. Our support team will be able to assist you on this.
1109: Unable to Extract Information from the given Msi Package
The possible reason for this error could be that the MSI package is corrupted.
1110: Access is Denied
The Active Directory credentials are taken while you define the scope of management. This credential is stored in Desktop Central, which will be used for deploying configurations. When this credential becomes invalid or if it does not have necessary privileges, this error is shown.
One possible reason is that the credential is modified outside the Desktop Central.
AdventNet, Inc. 119 AdventNet ManageEngine Desktop Central
1111: File Copy Failed
This error message is shown, when the user do not have necessary privileges to copy a file. Check whether the credentials supplied while defining the Scope of Management has necessary privileges.
1112: Folder Copy Failed
This error message is shown, when the user do not have necessary privileges to copy a folder. Check whether the credentials supplied while defining the Scope of Management has necessary privileges.
1113: The Given User Account is not a valid Domain Administrator
When the user account provided in the Scope of Management does not belong to a Domain Administrator group.
1114: The Given Password is wrong
The password provided in the Scope of Management is not valid.
1115: Active Directory/Domain Controller not Found
This error message is shown when no Active Directory/Domain Controller is found in your network. Desktop Central requires either of the two to perform the configurations.
AdventNet, Inc. 120 AdventNet ManageEngine Desktop Central
Knowledge Base
1. Is Windows 9x series supported by Desktop Central? 2. How will I know whether Desktop Central is currently running or not? 3. How to change the port number of the Web server? 4. Why my computer is not listed in the managed computers list? 5. How can I configure Windows XP SP2/Windows 2003 Server SP1 desktops so that I can manage them using Desktop Central? 6. How do I know the status of the applied configurations? 7. What types of scripts are supported in Custom Script configuration? 8. Can any executables be installed using Desktop Central? 9. Can I use Desktop Central in a multi-domain, multi-domain controller environment? 10. Why the status of the configuration never change to Executed though the configurations have been applied on all the targets? 11. When a Site is given as a target, the status always shows as In Progress. Why? 12. I am using the free version, but I see DesktopCentral folder in other machines which are not managed by Desktop Central. Why? 13. I have different types of Windows Os-es in my domain, such as Windows XP, Windows 2000, Windows 2003, and so on. Is it possible to manage only the Windows XP machines in my network? 14. I have defined a set of security policies and the status is shown as executed. However, the policies defined does not seem to have been applied. 15. What does "Not Applicable" in the Execution Status view indicate? 16. What is the significance of the "Update Now" button shown in Report page? 17. Will the inactive users be refreshed automatically?
1. Is Windows 9x series supported by Desktop Central?
No. Windows 9x series are not currently supported.
2. How will I know whether Desktop Central is currently running or not?
When the desktop Central is running, you can see the Desktop Central icon in the system tray. Alternatively, you can check for the following processes in the task manager: • java.exe - pertaining to the Desktop Central Server • mysqld-nt.exe - pertaining to the MySql database • wrapper.exe - pertaining to the system tray operations
3. How to change the port number of the Web server?
During installation, you can specify an alternate port for the Web server, the default being 8020.
If you wish to change the port after installation, select Admin --> Settings and change the Web Server Port from the Port Settings. This change will take effect when you restart Desktop Central.
AdventNet, Inc. 121 AdventNet ManageEngine Desktop Central
4. Why my computer is not listed in the managed computers list?
This happens when
1. The computer is not within the defined scope 2. When the agent or the Client Side Extension (CSE) is not installed in the computer. Try rebooting the computer.
5. How can I configure Windows XP SP2/Windows 2003 Server SP1 desktops so that I can manage them using Desktop Central?
To enable management in Windows XP SP2 and Windows 2003 Server SP1 using Desktop Central, perform the following steps:
1. Disable Windows Firewall. 2. Configure DCOM Settings.
For details on the above configurations, refer to Configuring DCOM Settings topic.
6. How do I know the status of the applied configurations?
You can view the status of the deployed configurations in the Desktop Central client by clicking the View Configuration link.
For details on various states, refer to the Managing Configurations and Collections topic.
7. What types of scripts are supported in Custom Script configuration?
In addition to the configurations that are supported by Desktop Central, administrators can also write their own scripts that could be run on the user machines for accomplishing specific configurations. The scripts could be any of the following: Batch file (.bat or .cmd) In any other language hosted by Windows Script Host (WSH), such as VB Script, JScript, Perl, REXX, and Python.
Note: The script engines for languages like Perl, REXX, and Python, must be registered with Windows.
8. Can any executables be installed using Desktop Central?
Any application in Microsoft Software Installer format (.MSI files) can be installed using Desktop Central.
9. Can I use Desktop Central in a multi-domain, multi-domain controller environment?
Configuring desktops in multiple domains from a single installation of Desktop Central is not currently supported. You can have different installations of Desktop Central for different domains. However, a single installation would suffice for a single domain with multiple domain controllers.
AdventNet, Inc. 122 AdventNet ManageEngine Desktop Central
10. Why the status of the configuration never change to Executed though the configurations have been applied on all the targets?
There is a possibility that there are some inactive users within the defined target. Add them to the inactive users list to get the accurate status of the configurations.
11. When a Site is given as a target, the status always shows as In Progress. Why?
There is no way to determine the user count in a given site. Without this it is not possible to verify whether the configuration is applied to all the users or not. Hence, the status is always shown as In Progress.
12. I am using the free version, but I see DesktopCentral folder in other machines which are not managed by Desktop Central. Why?
Desktop Central installs an agent or Client Side Extension (CSE) in the machines that are managed using the product. There is a possibility that during evaluation, you might have defined a scope that included more that 10 desktops. Since you can manage only up to ten desktops with the free version, you are still seeing the Desktop Central folders in the other machines that were managed during evaluation.
These agents will be removed when you uninstall Desktop Central.
13. I have different types of Windows Os-es in my domain, such as Windows XP, Windows 2000, Windows 2003, and so on. Is it possible to manage only the Windows XP machines in my network?
No. it is not possible to include the machines to be managed based on the OS type. When you select the Domain or the Organization Unit, all the machines under it will be included in the scope. However, you can exclude the machines from the target list based on the OS type while defining the configuration.
Refer to the Defining Targets topic for more details.
14. I have defined a set of security policies and the status is shown as executed. However, the policies defined does not seem to have been applied.
Desktop Central applies the configurations as per the Microsoft guidelines beyond which we do not have any control.
15. What does "Not Applicable" in the Execution Status view indicate?
When a configuration is applied using Desktop Central, the total target count, irrespective of whether the exclude criteria is defined or not, is shown as Total Target Computers in the Execution Status view . This is because, the number of desktops that falls under the exclude category can only be determined at the time of deployment in the client machines. This count is later included in the Not Applicable category to match the count.
For configurations that do not have an exclude criteria, the Not Applicable count will be zero.
AdventNet, Inc. 123 AdventNet ManageEngine Desktop Central
16. What is the significance of the "Update Now" button shown in Report page?
The details about the Active Directory are periodically fetched and stored in the database. Any modifications in the Active Directory will not be reflected in the report immediately as the update is only periodic. To synchronize the data, click the Update Now button.
17. Will the inactive users be refreshed automatically?
Inactive user entries will be refreshed automatically whenever the Active Directory contents are getting updated in Desktop Central's local database. Also the inactive user state will be made as active if any configuration, excluding Windows Installer, Alert, and Custom Script configurations, is applied for an inactive user.
AdventNet, Inc. 124 AdventNet ManageEngine Desktop Central
FAQs
1. What are the system requirements for Desktop Central? 2. What operating systems are supported by Desktop Central? 3. What is the difference between Free and Professional Editions? 4. Do I have to write scripts for using Desktop Central? 5. What is Scope of Management? 6. Do I need to define configurations separately or can I group them and define? 7. When are the configurations applied? 8. I want to stop running Desktop Central during machine boot-up, what to do ? 9. How to access Desktop Central UI or console from the remote ? 10. What are the requirements when setting up the Desktop Central ? 11. What is "Define Target"? 12. My free trial expired before I was through evaluating Desktop Central. Can I receive an extension? 13. Why is Desktop Central configuration done through a Web interface? 14. How is Desktop Central licensed?
1. What are the system requirements for Desktop Central?
Hardware requirements - Pentium4 1.0 Ghz processor, 512MB RAM, 200MB disk space.
Environment - Active Directory based Windows 2000/2003 domain setup.
Supported platforms - Windows 2000, Windows 2003, Windows XP
Supported Browsers - IE 5.5 and above, Netscape 7.0 and above, Mozilla 1.5 and above. You must install and enable Java plugin to use the software.
2. What operating systems are supported by Desktop Central?
Desktop Central supports Windows 2000, Windows 2003, and Windows XP operating systems.
3. What is the difference between Free and Professional Editions?
While the free edition can be used to manage up to 10 desktops free of cost, the professional edition can be used to manage the number of desktops for which it is licensed for. The free edition can be upgraded to professional edition at any point of time by obtaining a valid license from AdventNet.
4. Do I have to write scripts for using Desktop Central?
No, you do not have to write scripts for using any of the pre-defined configurations provided by Desktop Central. Just select the configuration, specify the required inputs, and deploy.
5. What is Scope of Management?
Scope of Management is used to define what are the computers to be managed using this software. When an Administrator use this software first time, he/she can use it with small set of computers then can slowly add more computers under management.
AdventNet, Inc. 125 AdventNet ManageEngine Desktop Central
6. Do I need to define configurations separately or can I group them and define?
Configurations that are intended for the same set of targets can be grouped and defined as collections. However, when the targets differ, you have to define them separately.
7. When are the configurations applied?
1. All user configurations, except Custom Script configuration, are applied during user logon. 2. All computer configurations, except Custom Script configuration, are applied during system startup. 3. Custom Script configuration can be applied during user logon/logoff or system startup/shutdown. 4. Both user and computer configurations are applied every 90 minutes through Windows Group Policies.
8. I want to stop running Desktop Central during machine boot-up, what to do?
Desktop Central, by default, is installed as a Windows service, which makes it to run when the system is started. To disable this,
1. Click on the "Settings" link on the top right corner of any page of Desktop Central. 2. In the Settings page uncheck the check box corresponding to "Start the product automatically on machine bootup" and save.
9. How to access Desktop Central client or console from the remote?
To access the Desktop Central client from remote, open a supported browser and type http://
10. What are the requirements when setting up the Desktop Central?
As a first step, you have to define the scope of management, which requires the Domain Admin user name and password.
Secondly, if the operating system of the machine running Desktop Central is either Windows XP SP2 or Windows 2003 Server SP1, you have to configure the DCOM settings as per the procedure explained in Configuring DCOM Settings topic.
11. What is "Define Target"?
Define Target is the process of identifying the users or computers for which the configuration have to be applied. The targets can be all users/computers belonging to a Site, Domain, OUs, Groups, or can be a specific user/computer. You also have an option to exclude some desktops based on the machine type, OS type, etc.
AdventNet, Inc. 126 AdventNet ManageEngine Desktop Central
12. My free trial expired before I was through evaluating Desktop Central. Can I receive an extension?
Customer Satisfaction is our prime motive. During the trial period of 45 days, unlimited number of desktops can be managed by Desktop Central. After the trial period the Software automatically switches to the free edition where only 10 desktops can be managed.
If you feel you would like to test the software for more number of desktops, but your trial period has expired, Kindly contact us so that we can arrange for a temporary license for few more days as per your requirement. You may note that the transition is smooth with no data loss and the configurations are not lost at any point of time. We want to make sure you are completely satisfied that the software is satisfying your need and solving your problem before buying it.
13. Why is Desktop Central configuration done through a Web interface?
Desktop administrators are always on the move. Desktop Central, with its web-based interface, facilitates the administrators to access the product from anywhere in the network not requiring them to be glued at one place for managing the desktops using the product.
14. How is Desktop Central licensed?
Desktop Central is licensed on annual subscription based on the number of Desktop it would manage. You can get the Pricing for the specific number of desktops from our online store.
AdventNet, Inc. 127 AdventNet ManageEngine Desktop Central
Security Policies
Using Desktop Central, you can define the security restrictions for the users and computers in the domain. This section provides you a brief description about the various security restrictions that can be applied using the product. Follow the links to learn more about the supported security policies under each category:
• Active Desktop • Desktop • Control Panel • Explorer • Internet Explorer • Network • System • Task Scheduler • Windows Installer • Start Menu and Taskbar • Microsoft Management Console • Computer
AdventNet, Inc. 128 AdventNet ManageEngine Desktop Central
Security Policies - Active Desktop
Desktop Central supports configuring the following security policies in Active Desktop category:
Security Policy Description Remove Active Desktop This setting will remove the Active Desktop options from item from Settings menu Settings on the Start Menu. Removes icons, shortcuts, and other default and user- Remove all desktop items defined items from the desktop, including Briefcase, Recycle Bin, My Computer, and My Network Places. Restrict adding any Prevents users from adding Web content to their Active desktop items Desktop. Prevents users from deleting Web content from their Active Restrict deleting any Desktop. This setting removes the Delete button from the desktop items Web tab in Display in Control Panel. Prevents users from changing the properties of Web Restrict editing any content items on their Active Desktop. This setting disables desktop items the Properties button on the Web tab in Display in Control Panel. Restrict closing any desktop items. This setting removes Restrict closing any the check boxes from items on the Web tab in Display in desktop items Control Panel. Permits only bitmap images for wallpaper. This setting Do not allow HTML limits the desktop background ("wallpaper") to bitmap wallpaper (.bmp) files. Specifies the desktop background ("wallpaper") displayed Restrict changing on all users' desktops. This setting lets you specify the wallpaper wallpaper on users' desktops and prevents users from changing the image or its presentation. Enables Active Desktop and prevents users from disabling Enable active desktop it. This prevents users from trying to enable or disable Active Desktop while a policy controls it. Disables Active Desktop and prevents users from enabling Disable active desktop it. This prevents users from trying to enable or disable Active Desktop while a policy controls it. Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration. This is a Prohibit changes comprehensive setting that locks down the configuration you establish by using other policies in this folder. This setting removes the Web tab from Display in Control Panel. Permits only bitmap images for wallpaper. This setting Allow only bitmapped wall limits the desktop background ("wallpaper") to bitmap paper (.bmp) files. Displays the filter bar above the results of an Active Enable filter in Find dialog Directory search. The filter bar consists of buttons for box applying additional filters to search results. Hides the Active Directory folder in My Network Places. The Hide AD folder Active Directory folder displays Active Directory objects in a browse window.
The policy descriptions are taken from Microsoft Help Documentation
AdventNet, Inc. 129 AdventNet ManageEngine Desktop Central
Security Policies - Desktop
Desktop Central supports configuring the following security policies in Desktop category:
Security Policy Description Removes icons, shortcuts, and other default and user- Hide and disable all items defined items from the desktop, including Briefcase, on the desktop Recycle Bin, My Computer, and My Network Places. This setting removes the My Documents icon from the Remove my documents desktop, from Windows Explorer, from programs that use icon on the desktop the Windows Explorer windows, and from the standard Open dialog box. Hide my network places Removes the My Network Places icon from the desktop. icon in desktop Hide Internet explorer Removes the Internet Explorer icon from the desktop and icon on desktop from the Quick Launch bar on the taskbar. Prevents users from manipulating desktop toolbars. If you Prevent adding, dragging, enable this setting, users cannot add or remove toolbars dropping and closing the from the desktop. Also, users cannot drag toolbars on to or taskbar tool off of docked toolbars. Prevents users from adjusting the length of desktop Prohibit adjusting desktop toolbars. Also, users cannot reposition items or toolbars on toolbar docked toolbars. Don't save settings at exit Prevents users from saving certain changes to the desktop.
The policy descriptions are taken from Microsoft Help Documentation
AdventNet, Inc. 130 AdventNet ManageEngine Desktop Central
Security Policies - Control Panel
Desktop Central supports configuring the following security policies in Control Panel category:
Security Policy Description Hide Accessibility Options Prevents access to the accessibility applet in control panel Applet Hide Add/Remove Prevents access to the Add/Remove Hardware Applet in Hardware Applet control panel Hide Add/Remove Removes Add/Remove Programs Applet in control panel Programs Applet Hide Client Services for Netware supporting client service applet will be removed Network Applet from control panel Hide Data Sources (ODBC) Removes open data base connection applet from control Applet panel Hide Date/Time Applet Removes date\time applet in control panel Hide Desktop Themes Removes desktop themes applet Applet Hide Display Applet Removes display applet from control panel Hide Games Controller Removes Games Controller Applet from control panel Applet Hide Internet Options Hide internet option applet Applet Hide Keyboard and Mouse Removes keyboard and mouse applet Applet Hide Network Connections Removes LAN connection 1 Applet #1 Hide Network Connections Removes LAN connection 2 Applet #2 Hide Mail Applet Removes mail configuring applet from control panel Hide Phone and Modem Removes phone and modem options applet Options Applet (2000+) Hide Power Options Applet Removes power option from control panel Hide Regional Options Removes regional options applet Applet Hide Scanners and Removes scanners and cameras applet Cameras Applet Hide Sounds and Removes sounds and multimedia applet Multimedia Applet Hide System Applet Removes system applet Hide Users and Passwords Removes users and passwords applet from control panel Applet Disables all Control Panel programs. This setting prevents Control.exe, the program file for Control Panel, from Disable control panel starting. As a result, users cannot start Control Panel or run any Control Panel items. Prevents users from using Add or Remove Programs. Remove add/remove This setting removes Add or Remove Programs from programs Control Panel and removes the Add or Remove Programs item from menus.
AdventNet, Inc. 131 AdventNet ManageEngine Desktop Central
Security Policy Description Removes the Change or Remove Programs button from the Hide change or remove Add or Remove Programs bar. As a result, users cannot programs page view or change the attached page. Removes the Add New Programs button from the Add or Hide add new programs Remove Programs bar. As a result, users cannot view or page change the attached page. Removes the Add/Remove Windows Components button Hide add/remove Windows from the Add or Remove Programs bar. As a result, users components page cannot view or change the associated page. Remove support Removes links to the Support Info dialog box from information programs on the Change or Remove Programs page. Hide appearance and Removes the Appearance and Themes tabs from Display in themes page Control Panel. Removes the Screen Saver tab from Display in Control Hide screen saver tab Panel. Hide settings tab Removes the Settings tab from Display in Control Panel. Password protect the Determines whether screen savers used on the computer screen saver are password protected. Prevent changing wall Prevents users from adding or changing the background paper design of the desktop. Remove display in control Disables Display in Control Panel. panel If you enable this setting or do not configure it, when users click "Add a network printer" but do not type the name of a Browse the network to particular printer, the Add Printer Wizard displays a list of find the printers all shared printers on the network and invites users to choose a printer from among them. Prevent addition of Prevents users from using familiar methods to add local printers and network printers. Prevents users from deleting local and network printers. Prevent deletion of If a user tries to delete a printer, such as by using the printers Delete option in Printers in Control Panel, a message appears explaining that a setting prevents the action.
The policy descriptions are taken from Microsoft Help Documentation
AdventNet, Inc. 132 AdventNet ManageEngine Desktop Central
Security Policies - Explorer
Desktop Central supports configuring the following security policies in Explorer category:
Security Policy Description Removes the Folder Options item from all Windows Remove folder options Explorer menus and removes the Folder Options item from menu item from the tools Control Panel. As a result, users cannot use the Folder menu Options dialog box. Remove Shutdown from Removes shutdown from the start menu and task manager Start menu and task dialog. manager Remove File menu from Removes the File menu from My Computer and Windows Explorer Explorer Remove 'Map network Prevents users from using Windows Explorer or My Network drive' and 'Disconnect Places to map or disconnect network drives. network drive' Remove Context Menu in Removes context menus which appears while right clicking Shell folders any folder in the explorer This setting allows you to remove the Active Desktop and Turn on classic shell Web view features. If you enable this setting, it will disable the Active Desktop and Web view. This setting is designed to ensure that shell extensions can operate on a per-user basis. If you enable this setting, Allow only approved Shell Windows is directed to only run those shell extensions that extensions have either been approved by an administrator or that will not impact other users of the machine. Determines whether Windows traces shortcuts back to their Do not track Shell sources when it cannot find the target on the user's shortcuts during roaming system. Remove search button Removes the Search button from the Windows Explorer from Windows explorer toolbar. Hides the manage item on Removes the Manage item from the Windows Explorer the Windows explorer context menu. This context menu appears when you right- context menu click Windows Explorer or My Computer. This setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel. Remove hardware tab It also removes the Hardware tab from the Properties dialog box for all local drives, including hard drives, floppy disk drives, and CD-ROM drives. Remove DFS tab Removes the DFS tab from Windows Explorer. Prevents users from selecting the option to animate the Remove UI to change movement of windows, menus, and lists. If you enable this menu animation setting setting, the "Use transition effects for menus and tooltips" option in Display in Control Panel is disabled. Remove UI to change When this Display Properties option is selected, the keyboard navigation underlining that indicates a keyboard shortcut character indicator setting (hot key) does not appear on menus until you press ALT. Removes the "Computers Near Me" option and the icons No 'computers near me' in representing nearby computers from My Network Places. My Network places This setting also removes these icons from the Map Network Drive browser.
AdventNet, Inc. 133 AdventNet ManageEngine Desktop Central
Security Policy Description Removes the Entire Network option and the icons No 'Entire network' in My representing networked computers from My Network Places Network places and from the browser associated with the Map Network Drive option. This setting suppresses the "Install Program As Other User" dialog box for local and network installations. This dialog Do not request alternate box, which prompts the current user for the user name and credentials password of an administrator, appears when users who are not administrators try to install programs locally on their computers. This setting displays the "Install Program As Other User" Request credentials for dialog box even when a program is being installed from network installations files on a network computer across a local area network connection. This option removes Log Off item from the Start Menu. It Hide logoff menu item also removes the Log Off button from the Windows Security dialog box.
The policy descriptions are taken from Microsoft Help Documentation
AdventNet, Inc. 134 AdventNet ManageEngine Desktop Central
Security Policies - Internet Explorer
Desktop Central supports configuring the following security policies in Internet Explorer category:
Security Policy Description Restrict using new menu Prevents users from opening a new browser window from option the File menu. Restrict using open menu Prevents users from opening a file or Web page from the option File menu in Internet Explorer. Restrict using Save As... Prevents users from saving Web pages from the browser menu option File menu to their hard disk or to a network share. Restrict on search Makes the Customize button in the Search Assistant customization appear dimmed. Restrict importing and Prevents users from exporting or importing favorite links exporting of favorites by using the Import/Export Wizard. Restrict using find files Disables using the F3 key to search in Internet Explorer (F3) within browser and Windows Explorer. Prevents users from saving the complete contents that Restrict using save as are displayed on or run from a Web page, including the Web page complete graphics, scripts, linked files, and other elements. It format option does not prevent users from saving the text of a Web page. Restrict closing of Prevents users from closing Microsoft Internet Explorer. browser Restrict full screen menu Prevents users from displaying the browser in full-screen option (kiosk) mode, without the standard toolbar. Prevents users from viewing the HTML source of Web Restrict viewing source pages by clicking the Source command on the View menu option menu. Prevents users from adding, removing, or editing the list Hide favorites menu of Favorite links. Restrict using Internet Prevents users from opening the Internet Options dialog Options... menu option box from the Tools menu in Microsoft Internet Explorer. Remove 'Tip of the Day' Prevents users from viewing or changing the Tip of the menu option Day interface in Microsoft Internet Explorer. Remove 'For Netscape Prevents users from displaying tips for users who are Users' menu option switching from Netscape. Remove 'Tour' menu Remove the Tour menu option. option Remove 'Send Feedback' Prevents users from sending feedback to Microsoft by menu option clicking the Send Feedback command on the Help menu. Restrict using 'Open in Prevents using the shortcut menu to open a link in a new New Window' menu browser window. option Prevents users from saving a program or file that Restrict using 'save this Microsoft Internet Explorer has downloaded to the hard program to disk' option disk. Remove context (right- Prevents the shortcut menu from appearing when users click) menus click the right mouse button while using the browser.
AdventNet, Inc. 135 AdventNet ManageEngine Desktop Central
Security Policy Description Hide the General Option Removes the General tab from the interface in the Screen Internet Options dialog box. Hide Security Option Removes the Security tab from the interface in the Screen Internet Options dialog box. Hide Content Option Removes the Content tab from the interface in the Screen Internet Options dialog box. Hide Connections Option Removes the Connections tab from the interface in the Screen Internet Options dialog box. Hide Programs Option Removes the Programs tab from the interface in the Screen Internet Options dialog box. Hide Advanced Option Removes the Advanced tab from the interface in the Screen Internet Options dialog box. Prevents users from changing the home page of the Restrict changing home browser. The home page is the first page that appears page settings when users start the browser. Restrict changing color Prevents users from changing the default Web page settings colors. Restrict changing link Prevents users from changing the colors of links on Web color settings pages. Restrict changing font Prevents users from changing font settings. settings Restrict changing Prevents users from changing language settings. language settings Restrict changing Cache Prevents users from changing Cache settings. settings Restrict changing history Prevents users from changing history settings. settings Restrict changing Prevents users from changing accessibility settings. accessibility setting Restrict changing Prevents users from changing the content advisor Content Advisor settings settings. Prevents users from changing certificate settings in Restrict changing Internet Explorer. Certificates are used to verify the certificate settings identity of software publishers. Restrict changing Profile Prevents users from changing Profile Assistant settings. Assistant settings Prevents Microsoft Internet Explorer from automatically Restrict changing completing forms, such as filling in a name or a AutoComplete clear form password that the user has entered previously on a Web page. Restrict changing Disables automatic completion of user names and AutoComplete save passwords in forms on Web pages, and prevents users password form from being prompted to save passwords. Restrict using Internet Prevents users from running the Internet Connection Connection Wizard Wizard. Restrict changing Prevents users from changing dial-up settings. connection settings Prevents users from changing automatic configuration Restrict changing settings. Automatic configuration is a process that Automatic Configuration administrators can use to update browser settings settings periodically.
AdventNet, Inc. 136 AdventNet ManageEngine Desktop Central
Security Policy Description Restrict changing proxy Prevents users from changing proxy settings. settings Restrict changing Prevents users from changing the default programs for Messaging settings messaging tasks. Restrict changing Prevents users from changing the default programs for Calendar and Contact managing schedules and contacts. settings Restrict Reset Web Prevents users from restoring default settings for home Settings feature and search pages. Restrict changing Check Prevents Microsoft Internet Explorer from checking to if Default Browser setting see whether it is the default browser. Restrict changing any Prevents users from changing settings on the Advanced Advanced settings tab in the Internet Options dialog box. Restrict changing Prevents Internet Explorer from automatically installing Automatic Install of IE components. components Restrict changing Prevents Internet Explorer from checking whether a new automatic check for version of the browser is available. software updates Restrict changing Prevents the Internet Explorer splash screen from showing the splash appearing when users start the browser. screen
The policy descriptions are taken from Microsoft Help Documentation
AdventNet, Inc. 137 AdventNet ManageEngine Desktop Central
Security Policies - Network
Desktop Central supports configuring the following security policies in Network category:
Security Policy Description Removes all computers outside of the user's workgroup or Hide 'Entire Network' from local domain from lists of network resources in Windows Network Neighborhood Explorer and My Network Places. Windows by default will accept anything as a password, including nothing. This setting controls whether Windows AlphaNumeric password will require a alphanumeric password, i.e. a password made from a combination of alpha (A, B, C...) and numeric (1, 2 ,3 ...) characters. Enable access to Determines whether a user can view and change the properties of RAS properties of remote access connections that are available connections available to to all users of the computer. all users Ability to delete all user Determines whether users can delete all user remote remote access connection access connections. Ability to enable/Disable Determines whether users can enable/disable LAN LAN connections connections. Determines whether users can rename LAN or all user Ability to rename LAN remote access connections. Prohibit access to Determines whether users can change the properties of a properties of LAN LAN connection. Prohibit access to Determines whether Administrators and Network properties of components Configuration Operators can change the properties of of LAN components used by a LAN connection. Prohibit access to the Determines whether the Advanced Settings item on the advanced settings item on Advanced menu in Network Connections is enabled for the advanced menu administrators. Prohibit access to the dial- Determines whether the Dial-up Preferences item on the up preferences item on Advanced menu in Network Connections folder is enabled. the advanced menu Allow configuration of Determines whether users can use the New Connection connection sharing (User) Wizard, which creates new network connections. Determines whether administrators can add and remove network components for a LAN or remote access Prohibit adding and connection. This setting has no effect on non- removing components for administrators. If you enable this setting the Install and a LAN or RA connection Uninstall buttons for components of connections are disabled, and administrators are not permitted to access network components in the Windows Components Wizard. Determines whether users can configure advanced TCP/IP Prohibit TCP/IP advanced settings. If you enable this setting, the Advanced button on configuration the Internet Protocol Properties dialog box is disabled for all users (including administrators). Determines whether users can view the status for an active Prohibit viewing of status connection. The connection status taskbar icon and Status for an active connection dialog box are not available to users (including administrators).
AdventNet, Inc. 138 AdventNet ManageEngine Desktop Central
Security Policy Description Prevents users from making network files and folders Remove 'make available available offline. This setting removes the "Make Available offline' Offline" option from the File menu and from all context menus in Windows Explorer. Sync offline files before Determines whether offline files are fully synchronized logging off when users log off.
The policy descriptions are taken from Microsoft Help Documentation
AdventNet, Inc. 139 AdventNet ManageEngine Desktop Central
Security Policies - System
Desktop Central supports configuring the following security policies in System category:
Security Policy Description Restrict using registry Disables the Windows registry editors, Regedit.exe editing tools If this setting is enabled and users try to start Task Manager, Remove task manager a message appears explaining that a policy prevents the action. Restrict using Lock Prevents users from locking their workstation Workstation Restrict Changing Prevents users from changing the password. Password Restrict using Passwords Prevents users from changing the account password of local applet in Control Panel users through the password applet in control panel. Restrict using Change Prevents users from accessing change password Passwords page Hide Background page Prevents users using background page Hide Remote Removes remote administration page Administration page Hide User Profiles page Removes user profiles pages Hide Device Manager Removes device manager page page Hide Hardware Profiles Prevents hardware profile page form being accessed page Suppresses the welcome screen. This setting hides the Don't display the getting welcome screen that is displayed on Windows 2000 started welcome screen Professional and Windows XP Professional each time the user at logon logs on. Directs the system to search Active Directory for missing Download missing COM Component Object Model components that a program components requires. Prevent access to Disables the Windows registry editors, Regedit.exe and registry accessing tools Regedit.exe. Windows 2000 displays the instructions in logon scripts written for Windows NT 4.0 and earlier in a command Run legacy logon scripts window as they run, although it does not display logon hidden scripts written for Windows 2000. If you enable this setting, Windows 2000 does not display logon scripts written for Windows NT 4.0 and earlier. If the setting is enabled, the system displays each instruction Run logoff scripts visible in the logoff script as it runs. The instructions appear in a command window. If the setting is enabled, Windows Explorer does not start until the logon scripts have finished running. This setting Run logon scripts ensures that logon script processing is complete before the synchronously user starts working, but it can delay the appearance of the desktop. If the setting is enabled, the system displays each Run logon scripts visible instruction in the logon script as it runs. The instructions appear in a command window.
AdventNet, Inc. 140 AdventNet ManageEngine Desktop Central
Security Policy Description Do not process the If the setting is enabled, the system ignores the run list for legacy run list Windows NT 4.0, Windows 2000, and Windows XP. You can create a customized list of additional programs and documents that are started automatically the next time the Do not process the system starts (but not thereafter). These programs are runonce list added to the standard list of programs and services that the system starts. If you enable this setting, the system ignores the run-once list. This setting creates all new Group Policy object links in the disabled state by default. After you configure and test the Create a new GPO links new object links, either by using Active Directory Users and disabled by default Computers or Active Directory Sites and Services, you can enable the object links for use on the system. Prevents administrators from viewing or using Group Policy preferences. A Group Policy administration (.adm) file can contain both true settings and preferences. True settings, Enforce show policies which are fully supported by Group Policy, must use registry only entries in the Software\Policies or Software\Microsoft\Windows\CurrentVersion\Policies registry subkeys. Preferences, which are not fully supported, use registry entries in other subkeys. Prevents the system from updating the Administrative Turn off automatic Templates source files automatically when you open Group update of ADM files Policy.
The policy descriptions are taken from Microsoft Help Documentation
AdventNet, Inc. 141 AdventNet ManageEngine Desktop Central
Security Policies - Task Scheduler
Desktop Central supports configuring the following security policies in Task Scheduler category:
Security Policy Description This setting removes the Properties item from the File menu in Scheduled Tasks and from the context menu that appears when you right-click a task. As a result, users Hide property pages cannot change any properties of a task. They can only see the properties that appear in Detail view and in the task preview. Prevent task run or end Prevents users from starting and stopping tasks manually. Prevents users from adding or removing tasks by moving or Prohibit drag and drop copying programs in the Scheduled Tasks folder. Prohibit new task creation Prevents users from creating new tasks Prevents user from deleting users from the scheduled tasks Prohibit task deletion folder Prevents users from viewing or changing the properties of Remove advanced menu newly created tasks. This setting removes the Browse button from the Schedule Task Wizard and from the Task tab of the properties dialog Prohibit browse box for a task. Also, users cannot edit the "Run" box or the "Start in" box that determine the program and path for a task.
The policy descriptions are taken from Microsoft Help Documentation
AdventNet, Inc. 142 AdventNet ManageEngine Desktop Central
Security Policies - Windows Installer
Desktop Central supports configuring the following security policies in Windows Installer category:
Security Policy Description This setting extends elevated privileges to all programs. These privileges are usually reserved for programs that have been assigned to the user (offered on the desktop), assigned to the computer (installed automatically), or made Always install with available in Add or Remove Programs in Control Panel. This elevated privileges setting lets users install programs that require access to directories that the user might not have permission to view or change, including directories on highly restricted computers. This setting prevents Windows Installer from recording the original state of the system and sequence of changes it makes during installation. It also prevents Windows Prohibit rollback Installer from retaining files it intends to delete later. As a result, Windows Installer cannot restore the computer to its original state if the installation does not complete. Disable media source for Prevents users from installing programs from removable any install media.
The policy descriptions are taken from Microsoft Help Documentation
AdventNet, Inc. 143 AdventNet ManageEngine Desktop Central
Security Policies - Start Menu and Taskbar
Desktop Central supports configuring the following security policies in Start Menu and Taskbar category:
Security Policy Description Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden. Remove user's folder from This setting is designed for use with redirected folders. the start menu Redirected folders appear on the main (bottom) section of the Start menu. Remove links and access Prevents users from connecting to the Windows Update to Web site. Windows update Remove common program Removes items in the All Users profile from the Programs groups from start menu menu on the Start menu. Prohibit user from Prevents users from changing the path to the My changing My Documents Documents folder. path Remove My Documents Removes the Documents menu from the Start menu. from start menu Remove programs on Prevents Control Panel, Printers, and Network Connections settings menu from running. Remove network connections from start Prevents users from running Network Connections. menu Remove favorites from Prevents users from adding the Favorites menu to the Start start menu menu or classic Start menu. Removes the Search item from the Start menu, and disables some Windows Explorer search elements. This setting removes the Search item from the Start menu and Remove search from start from the context menu that appears when you right-click menu the Start menu. Also, the system does not respond when users press the Application key (the key with the Windows logo)+ F. Remove help menu from Removes the Help command from the Start menu. start menu Remove run from start Allows you to remove the Run command from the Start menu menu, Internet Explorer, and Task Manager. Add logoff to the start Adds the "Log Off
AdventNet, Inc. 144 AdventNet ManageEngine Desktop Central
Security Policy Description Prevent changes to Removes the Taskbar and Start Menu item from Settings taskbar and start menu on the Start menu. This setting also prevents the user from settings opening the Taskbar Properties dialog box. Hides the menus that appear when you right-click the Remove context menu for taskbar and items on the taskbar, such as the Start button, the taskbar the clock, and the taskbar buttons. Do not keep the history Prevents the operating system and installed programs from of recently opened creating and displaying shortcuts to recently opened documents documents. Clear history of recently opened documents history Clear history of recently opened documents on exit. on exit Disables personalized menus. Windows 2000 personalizes Turn off personalized long menus by moving recently used items to the top of the menus menu and hiding items that have not been used recently. Disables user tracking. This setting prevents the system Turn off user tracking from tracking the programs users run, the paths they navigate, and the documents they open. Add 'run in separate Lets users run a 16-bit program in a dedicated (not shared) memory space' check box Virtual DOS Machine (VDM) process. to run dialog box Do not use the search Prevents the system from conducting a comprehensive based method when search of the target drive to resolve a shortcut. resolving shell shortcuts Do not use the tracking Prevents the system from using NTFS tracking features to based method when resolve a shortcut. resolving shell shortcuts Displays Start menu shortcuts to partially installed Gray unavailable Windows programs in gray text. This setting makes it easier for installer programs start users to distinguish between programs that are fully menu shortcuts installed and those that are only partially installed.
The policy descriptions are taken from Microsoft Help Documentation
AdventNet, Inc. 145 AdventNet ManageEngine Desktop Central
Security Policies - Microsoft Management Console
Desktop Central supports configuring the following security policies in Microsoft Management Console category:
Security Policy Description Users cannot create console files or add or remove snap- Restrict user from entering ins. Also, because they cannot open author-mode console author mode files, they cannot use the tools that the files contain. All snap-ins are prohibited, except those that you explicitly Restrict users to the permit. Use this setting if you plan to prohibit use of most explicitly permitted list of snap-ins. To explicitly permit a snap-in, open the snap-ins Restricted/Permitted snap-ins setting folder and enable the settings representing the snap-in you want to permit. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Component setting is not configured, the setting of the "Restrict users services snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Computer setting is not configured, the setting of the "Restrict users management snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Device setting is not configured, the setting of the "Restrict users manager snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Disk setting is not configured, the setting of the "Restrict users management snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited.
Restrict/permit Disk de- If this setting is not configured, the setting of the "Restrict fragmentation snap-in users to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Event setting is not configured, the setting of the "Restrict users viewer snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited.
AdventNet, Inc. 146 AdventNet ManageEngine Desktop Central
Security Policy Description If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited.
Restrict/permit Fax If this setting is not configured, the setting of the "Restrict services snap-in users to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Indexing setting is not configured, the setting of the "Restrict users services snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. Restrict/permit Internet Information Services snap- If this setting is not configured, the setting of the "Restrict in users to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Local users setting is not configured, the setting of the "Restrict users and groups snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit setting is not configured, the setting of the "Restrict users Performance logs and to the explicitly permitted list of snap-ins" setting alerts snap-in determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Services setting is not configured, the setting of the "Restrict users snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Shared setting is not configured, the setting of the "Restrict users folders snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit System setting is not configured, the setting of the "Restrict users information snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited.
AdventNet, Inc. 147 AdventNet ManageEngine Desktop Central
Security Policy Description If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Telephony setting is not configured, the setting of the "Restrict users snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit WMI control setting is not configured, the setting of the "Restrict users snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit System setting is not configured, the setting of the "Restrict users properties snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Group setting is not configured, the setting of the "Restrict users policy snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Group setting is not configured, the setting of the "Restrict users policy tab for active to the explicitly permitted list of snap-ins" setting directory tool snap-in determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit setting is not configured, the setting of the "Restrict users Administrative templates to the explicitly permitted list of snap-ins" setting (computer) snap-in determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit setting is not configured, the setting of the "Restrict users Administrative templates to the explicitly permitted list of snap-ins" setting (users) snap-in determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Folder setting is not configured, the setting of the "Restrict users redirection snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Internet setting is not configured, the setting of the "Restrict users explorer maintenance to the explicitly permitted list of snap-ins" setting snap-in determines whether this snap-in is permitted or prohibited.
AdventNet, Inc. 148 AdventNet ManageEngine Desktop Central
Security Policy Description If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Remote setting is not configured, the setting of the "Restrict users installation services snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Scripts setting is not configured, the setting of the "Restrict users (logon/logoff) snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit setting is not configured, the setting of the "Restrict users Scripts(startup/shutdown) to the explicitly permitted list of snap-ins" setting snap-in determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Security setting is not configured, the setting of the "Restrict users settings snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Software setting is not configured, the setting of the "Restrict users installation (computer) to the explicitly permitted list of snap-ins" setting snap-in determines whether this snap-in is permitted or prohibited. If the setting is enabled, the snap-in is permitted. If the setting is disabled, the snap-in is prohibited. If this Restrict/permit Software setting is not configured, the setting of the "Restrict users installation (user) snap-in to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited.
The policy descriptions are taken from Microsoft Help Documentation
AdventNet, Inc. 149 AdventNet ManageEngine Desktop Central
Security Policies - Computer
Desktop Central supports configuring the following security policies in Computer category:
Security Policy Description Disable ctrl+alt+del Determines whether pressing CTRL+ALT+DEL is required requirement for logon before a user can log on. Restrict CD-ROM access to Determines whether a CD-ROM is accessible to both local locally logged-on user and remote users simultaneously. only Restrict Floppy access to Determines whether removable floppy media is accessible locally logged-on user to both local and remote users simultaneously. only Prevent users from It prevents users from installing printer drivers on the local installing printer drivers machine. Prevent user from Disables the buttons on the File Types tab. As a result, changing file type users can view file type associations, but they cannot add, association delete, or change them.
The policy descriptions are taken from Microsoft Help Documentation
AdventNet, Inc. 150 AdventNet ManageEngine Desktop Central
Dynamic Variables
Dynamic Variables are those that are replaced dynamically by Desktop Central while applying the configurations. As the name implies, the value of these variables are not the same for all the users/computers.
For example, to redirect the shortcuts of the start menu that are common for all the users to the system drive, you can use the dynamic variable $SystemDrive. This will be replaced by the corresponding system drive of that computer (like C, D, etc.) while deploying the configuration.
The table below lists the dynamic variable supported by Desktop Central:
Example Value of the Dynamic Variable Description Variable Specifies the path to the $ComSpec C:\WINNT\system32\cmd.exe command interpretor Refers to the home $HomePath directory as defined in \\JOHNSMITH\ UMD/AD Role of NT/2000/XP $NtType Server, Workstation computer Short name of currently $OS Windows_NT installed operating system 2000 & XP will report back $OSVersion Windows 2000 as NT 2000 & XP will report back $OStype NT as NT Refers to the build number $OsBuildNumber of the currently installed 1381, 2195 operating system Refers to the service pack $OsCsdVersion of the currently installed Service Pack 4 operating system Will be replaced by the full C:\Documents and $ProfileDirDU path of the "Default User" Settings\Default User profile Will be replaced by the full $ProfilesDir path of where user profiles C:\Documents and Settings are stored Will be replaced by the C:\Documents and path to current user's Settings\JohnSmith\Local $ShellCache Temporary Internet Files Settings\Temporary Internet shell folder Files Will be replaced by the path to current user's C:\Documents and $ShellCookies Internet Cookies shell Settings\JohnSmith\Cookies folder
AdventNet, Inc. 151 AdventNet ManageEngine Desktop Central
Example Value of the Dynamic Variable Description Variable Will be replaced by the C:\Documents and $ShellDesktop path to current user's Settings\JohnSmith\Desktop Desktop shell folder Will be replaced by the path to current user's C:\Documents and $ShellFavorites Favorites shell folder (also Settings\JohnSmith\Favorites referred to as "IE Bookmarks"). Will be replaced by the C:\Documents and $ShellHistory path to current user's Settings\JohnSmith\Local History shell folder Settings\History Will be replaced by the C:\Documents and $ShellMyPictures path to current user's My Settings\JohnSmith\My Pictures shell folder Documents\My Pictures Will be replaced by the path to current user's C:\Documents and $ShellNetHood Network Neighborhood Settings\JohnSmith\NetHood shell folder Will be replaced by the path to current user's C:\Documents and $ShellPersonal Personal shell folder (also Settings\JohnSmith\My referred to as "My Documents Documents") Will be replaced by the path to current user's C:\Documents and $ShellPrintHood Printer Neighborhood shell Settings\JohnSmith\PrintHood folder Will be replaced by the C:\Documents and path to current user's $ShellPrograms Settings\JohnSmith\Start Start Menu Programs shell Menu\Programs folder Will be replaced by the path to current user's C:\Documents and $ShellRecent Recent Documents shell Settings\JohnSmith\Recent folder Will be replaced by the C:\Documents and $ShellSendTo path to current user's Settings\JohnSmith\SendTo Send To shell folder Will be replaced by the C:\Documents and $ShellStartMenu path to current user's Settings\JohnSmith\Start Start-Menu shell folder Menu Will be replaced by the C:\Documents and path to current user's $ShellStartup Settings\JohnSmith\Start Start Menu Startup shell Menu\Programs\Startup folder Will be replaced by the C:\Documents and $ShellTemplates path to current user's Settings\JohnSmith\Templates Templates shell folder
AdventNet, Inc. 152 AdventNet ManageEngine Desktop Central
Example Value of the Dynamic Variable Description Variable Refers to the drive where $SystemDrive C: OS files are located Will be replaced by the $SystemRoot path to operating system C:\WINNT folder Will be replaced by the C:\Documents and $TempDir path to the temporary Settings\JohnSmith\Local directory on the client Settings\Temp Will be replaced by the path to user's Windows folder (usually same as $WinDir C:\WINNT SystemRoot, exception would be a terminal server)
AdventNet, Inc. 153 AdventNet ManageEngine Desktop Central
Limitations
1. Configuring users / computers belonging to multiple domains is not supported. 2. The status of the Windows Installer, Alert, and Custom Script configurations will not be shown in the Desktop Central client. 3. The custom script will be run in the client machines with the user privilege. Hence operations involving administrator privileges could not be performed. 4. When a configuration is applied to an organization unit, the status will be available only for the users / computers that are under the OU at the time of deployment. For example, for users / computers added to this OU later will have the configurations deployed, but their status will not be shown. 5. When a site is chosen as the target for a user configuration, the status of the configuration will always be In Progress. This is because, it is not possible to get the exact user counts of individual sites. 6. Specifying a range of IP Addresses in defining targets (when the selected target type is IP Address) is not supported. It only accepts IP Addresses as comma separated values. 7. In the exclude list for the defined targets for Alert, Custom Script, and Windows Installer configurations for users, you can only specify computers, groups, and users and all the other options will not work, though you can specify in the UI. 8. Specifying IP Addresses as the targets for Alert, Custom Script, and Windows Installer configurations for computers is not supported. 9. When a user login to different computers in a domain, the status of the configurations defined for that user will reflect the status of the latest deployment. 10. In Windows XP SP2 and Windows 2003 SP1 operating systems, you have to perform some DCOM and Firewall related changes as described in Configuring DCOM Settings topic to run/manage using Desktop Central 11. The Directory Information Tree Details of the Active Directory Domain Reports will be available only if the product is run in the Domain Controller. 12. Supports only English language. 13. When an already defined configuration is modified and re-deployed, the previous data will be overwritten and will not be shown in history reports.
AdventNet, Inc. 154 AdventNet ManageEngine Desktop Central
Glossary
• Site • Domain • Organizational Unit • Group • User • Computer • IP Address • Group Policy Object (GPO) • Client Side Extension (CSE) • Define Target • Scope of Management • Inactive Users • Collection
This section provides the description or definitions of the terms used in Desktop Central.
Site
One or more well connected (highly reliable and fast) TCP/IP subnets. A site allows administrators to configure Active Directory access and replication topology quickly and easily to take advantage of the physical network. When users log on, Active Directory clients locate Active Directory servers in the same site as the user.
Domain
Domain is a group of computers that are part of a network and share a common directory database. A domain is administered as a unit with common rules and procedures. Each domain has a unique name.
Organizational Unit (OU)
An organizational unit is a logical container into which users, groups, computers, and other organizational units are placed. It can contain objects only from its parent domain. An organizational unit is the smallest scope to which a Group Policy object can be linked, or over which administrative authority can be delegated.
Group
A collection of users, computers, contacts, and other groups. Groups can be used as security or as e-mail distribution collections. Distribution groups are used only for e-mail. Security groups are used both to grant access to resources and as e-mail distribution lists.
User
The people using the workstations in the network are called users. Each user in the network has a unique user name and corresponding password for secured access.
AdventNet, Inc. 155 AdventNet ManageEngine Desktop Central
Computer
The PCs in the network which are accessed by users are known as computer or workstation. Each computer has unique name.
IP Address
The expansion of IP Address is Internet Protocol Address. An unique IP Address is provided for each workstation, switches, printers, and other devices present in the network for identification and routing of information.
Group Policy Object (GPO)
A Group Policy Object (GPO) is a collection of settings that define what a system will look like and how it will behave for a defined group of users.
Client Side Extension (CSE)
Desktop Central installs an Windows-compliant agent or a Client Side Extension (CSE) in the machines that are being managed. This is used to get the status of the applied configurations from the targets.
Define Target
Define Target is the process of identifying the users or computers for which the configuration have to be applied. The targets can be all users/computers belonging to a Site, Domain, OUs, Groups, or can be a specific user/computer. You also have an option to exclude some desktops based on the machine type, OS type, etc.
Scope of Management
Scope of Management (SOM) is used to define the computers that have to be managed using this software. Initially the administrator can define a small set of computers for testing the software and later extend it to the whole domain. This provides more flexibility in managing your desktops using this software.
Inactive Users
In a Windows Domain there may be cases where the user accounts have been created for some machines but they remain inactive for some reasons. For example, users like Guest, IUSER_WIN2KMASTER, IWAM_WIN2KMASTER, etc., will never login. These user accounts are referred to as Inactive Users. In order to get the accurate configuration status of the active users, it is recommended that the Admin User add the inactive user accounts in their domain so that these users (user accounts) may not be considered for calculating the status.
Collection
Configurations that are intended for the same set of targets can be grouped as a collection.
Some definitions are adapted from Microsoft Help Documentation.
AdventNet, Inc. 156